Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-4800 (GCVE-0-2026-4800)
Vulnerability from cvelistv5 – Published: 2026-03-31 19:25 – Updated: 2026-07-21 12:04
VLAI
EPSS
VEX
Title
lodash vulnerable to Code Injection via `_.template` imports key names
Summary
Impact:
The fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink.
When an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.
Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
Patches:
Users should upgrade to version 4.18.0.
Workarounds:
Do not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
72 references
Impacted products
223 products
| Vendor | Product | Version | |
|---|---|---|---|
| lodash | lodash |
Affected:
4.0.0 , < 4.18.0
(semver)
Unaffected: 4.18.0 (semver) |
|
| lodash | lodash-es |
Affected:
4.0.0 , < 4.18.0
(semver)
Unaffected: 4.18.0 (semver) |
|
| lodash | lodash-amd |
Affected:
4.0.0 , < 4.18.0
(semver)
Unaffected: 4.18.0 (semver) |
|
| lodash | lodash.template |
Affected:
4.0.0 , < 4.18.0
(semver)
Unaffected: 4.18.0 (semver) |
|
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-9 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:2.5.20260715-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:2.5.20260715-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:2.6.9-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Data Grid 8.6.1 |
cpe:/a:redhat:jboss_data_grid:8 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.12.1-1.el10_1.3 , < *
(rpm)
Unaffected: 0:0.12.2-3.el10_2.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:94.3-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.12.0-3.el10_0.5 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:0.10.8-1.el8_4.11 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:0.10.8-1.el8_4.11 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:0.10.12-6.el8_6.13 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.6::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:0.10.12-6.el8_6.13 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.6::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:0.10.15-4.el8_8.11 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:0.10.15-4.el8_8.11 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.11.10-1.el9_7.3 , < *
(rpm)
Unaffected: 0:0.11.11-2.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:0.11.1-10.el9_0.11 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:0.11.4-7.el9_2.8 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:0.11.7-2.el9_4.7 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.11.9-2.el9_6.4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6::highavailability |
|
| Red Hat | Streams for Apache Kafka 2.9.4 |
cpe:/a:redhat:amq_streams:2.9::el9 |
|
| Red Hat | Streams for Apache Kafka 3.2.0 |
cpe:/a:redhat:amq_streams:3.2::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839279 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840539 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839996 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Migration Toolkit for Virtualization 2.1 |
Unaffected:
1779139872 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9 |
|
| Red Hat | Migration Toolkit for Virtualization 2.9 |
Unaffected:
1778927462 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9 |
|
| Red Hat | Network Observability (NETOBSERV) 1.11.2 |
Unaffected:
1778508956 , < *
(rpm)
cpe:/a:redhat:network_observ_optr:1.11::el9 |
|
| Red Hat | Network Observability (NETOBSERV) 1.11.2 |
Unaffected:
1778510461 , < *
(rpm)
cpe:/a:redhat:network_observ_optr:1.11::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 |
Unaffected:
1777403872 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1777387242 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Developer Hub 1.8 |
Unaffected:
1776784286 , < *
(rpm)
cpe:/a:redhat:rhdh:1.8::el9 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1777903262 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502765 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502438 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194938 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194574 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126822 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127736 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783690532 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1780467029 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
|
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1780467147 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1779189627 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1778473763 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1778666987 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
1782934080 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1778517109 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1782269794 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1778256287 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1779874967 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1779256322 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1779249920 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1778644858 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1778645008 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1784148070 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1783502338 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1782224390 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778076673 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778076741 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778076916 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077421 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778076861 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077066 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077002 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077164 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077913 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077379 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077455 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077447 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778078096 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077527 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077651 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077920 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077737 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.16 |
Unaffected:
1778077839 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.16::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049594 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049298 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049745 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049753 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050558 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049818 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049878 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049920 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049945 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778060364 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050037 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050035 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050048 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050508 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050119 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050290 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778059723 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050352 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050482 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045210 , < *
(rpm)
Unaffected: 1783676191 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778044961 , < *
(rpm)
Unaffected: 1783929816 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045359 , < *
(rpm)
Unaffected: 1784094353 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045374 , < *
(rpm)
Unaffected: 1784093953 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045891 , < *
(rpm)
Unaffected: 1784094943 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045472 , < *
(rpm)
Unaffected: 1783676585 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045534 , < *
(rpm)
Unaffected: 1783676649 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045524 , < *
(rpm)
Unaffected: 1783676675 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045587 , < *
(rpm)
Unaffected: 1784094299 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778046067 , < *
(rpm)
Unaffected: 1784094725 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045627 , < *
(rpm)
Unaffected: 1783676820 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045731 , < *
(rpm)
Unaffected: 1783676883 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045700 , < *
(rpm)
Unaffected: 1783676894 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778046234 , < *
(rpm)
Unaffected: 1784095175 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045792 , < *
(rpm)
Unaffected: 1783676977 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045858 , < *
(rpm)
Unaffected: 1784093503 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045945 , < *
(rpm)
Unaffected: 1783677297 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045931 , < *
(rpm)
Unaffected: 1783677345 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778046079 , < *
(rpm)
Unaffected: 1783677533 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776079019 , < *
(rpm)
Unaffected: 1783684360 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776706744 , < *
(rpm)
Unaffected: 1783684068 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707205 , < *
(rpm)
Unaffected: 1784054582 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707231 , < *
(rpm)
Unaffected: 1784054606 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707760 , < *
(rpm)
Unaffected: 1784055295 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707301 , < *
(rpm)
Unaffected: 1783684603 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776079295 , < *
(rpm)
Unaffected: 1783684668 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707362 , < *
(rpm)
Unaffected: 1783684667 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707418 , < *
(rpm)
Unaffected: 1784054873 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707377 , < *
(rpm)
Unaffected: 1783684707 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707947 , < *
(rpm)
Unaffected: 1784055589 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707456 , < *
(rpm)
Unaffected: 1783684779 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707526 , < *
(rpm)
Unaffected: 1783684831 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707526 , < *
(rpm)
Unaffected: 1783684839 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707945 , < *
(rpm)
Unaffected: 1784055533 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707569 , < *
(rpm)
Unaffected: 1784055558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707724 , < *
(rpm)
Unaffected: 1784056134 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707763 , < *
(rpm)
Unaffected: 1783685128 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707771 , < *
(rpm)
Unaffected: 1783685129 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776079774 , < *
(rpm)
Unaffected: 1783685375 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1775822432 , < *
(rpm)
Unaffected: 1783667125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776403457 , < *
(rpm)
Unaffected: 1783666755 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776403991 , < *
(rpm)
Unaffected: 1784054598 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404009 , < *
(rpm)
Unaffected: 1784055387 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404539 , < *
(rpm)
Unaffected: 1784055726 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404060 , < *
(rpm)
Unaffected: 1783667517 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1775822689 , < *
(rpm)
Unaffected: 1783667577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404131 , < *
(rpm)
Unaffected: 1783667611 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406225 , < *
(rpm)
Unaffected: 1784055020 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406131 , < *
(rpm)
Unaffected: 1783667641 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406770 , < *
(rpm)
Unaffected: 1784055586 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406247 , < *
(rpm)
Unaffected: 1783667790 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406286 , < *
(rpm)
Unaffected: 1783667859 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406291 , < *
(rpm)
Unaffected: 1783667875 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406284 , < *
(rpm)
Unaffected: 1783667869 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406291 , < *
(rpm)
Unaffected: 1783667877 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406771 , < *
(rpm)
Unaffected: 1784055576 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406384 , < *
(rpm)
Unaffected: 1784055244 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406540 , < *
(rpm)
Unaffected: 1784055382 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406595 , < *
(rpm)
Unaffected: 1783668266 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406594 , < *
(rpm)
Unaffected: 1783668288 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1775823207 , < *
(rpm)
Unaffected: 1783669219 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.27 |
Unaffected:
1776744110 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.27::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.27 |
Unaffected:
1776795511 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.27::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.27 |
Unaffected:
1776716842 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.27::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.1 |
Unaffected:
1776435608 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenShift GitOps 1.18 |
Unaffected:
1779115545 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.18::el8 |
|
| Red Hat | Red Hat OpenShift GitOps 1.19 |
Unaffected:
1779210530 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.19::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1776202125 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1776191302 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1776151124 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1776151272 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776151106 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776151270 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776155669 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776149682 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1776151134 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1776151277 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1777911535 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
|
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1777498806 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
|
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1776194798 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1776330093 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1 |
|
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4 |
|
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:5 |
|
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8 |
|
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine |
|
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0 |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2 |
|
| Red Hat | Red Hat Advanced Cluster Security 4 |
cpe:/a:redhat:advanced_cluster_security:4 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 |
cpe:/a:redhat:apache_camel_hawtio:4 |
|
| Red Hat | Red Hat build of Apicurio Registry 2 |
cpe:/a:redhat:service_registry:2 |
|
| Red Hat | Red Hat build of Apicurio Registry 3 |
cpe:/a:redhat:apicurio_registry:3 |
|
| Red Hat | Red Hat Build of Keycloak |
cpe:/a:redhat:build_keycloak: |
|
| Red Hat | Red Hat Build of Podman Desktop |
cpe:/a:redhat:podman_desktop:1 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1 |
|
| Red Hat | Red Hat Developer Hub |
cpe:/a:redhat:rhdh:1 |
|
| Red Hat | Red Hat Directory Server 11 |
cpe:/a:redhat:directory_server:11 |
|
| Red Hat | Red Hat Directory Server 12 |
cpe:/a:redhat:directory_server:12 |
|
| Red Hat | Red Hat Directory Server 13 |
cpe:/a:redhat:directory_server:13 |
|
| Red Hat | Red Hat Discovery 2 |
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3 |
|
| Red Hat | Red Hat Fuse 7 |
cpe:/a:redhat:jboss_fuse:7 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 |
cpe:/a:redhat:jboss_enterprise_application_platform:7 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 |
cpe:/a:redhat:jboss_enterprise_application_platform:8 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack |
cpe:/a:redhat:jbosseapxp |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat Process Automation 7 |
cpe:/a:redhat:jboss_enterprise_bpms_platform:7 |
|
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Red Hat Single Sign-On 7 |
cpe:/a:redhat:red_hat_single_sign_on:7 |
|
| Red Hat | Red Hat Trusted Artifact Signer |
cpe:/a:redhat:trusted_artifact_signer:1 |
|
| Red Hat | Red Hat Trusted Profile Analyzer |
cpe:/a:redhat:trusted_profile_analyzer:2 |
|
| Red Hat | Self-service automation portal 2 |
cpe:/a:redhat:ansible_portal:2 |
Credits
dolevmiz1
bugbunny-research
M0nd0R
UlisesGascon
falsyvalues
jonchurch
threalwinky
jdalton
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-4800",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-31T20:36:55.080392Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-31T20:37:03.964Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.20260715-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.20260715-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "automation-platform-ui",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.9-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "lodash",
"product": "Red Hat Data Grid 8.6.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.12.1-1.el10_1.3",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.12.2-3.el10_2.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "cockpit-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:94.3-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.12.0-3.el10_0.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.10.8-1.el8_4.11",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.10.8-1.el8_4.11",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.10.12-6.el8_6.13",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.10.12-6.el8_6.13",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.10.15-4.el8_8.11",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.10.15-4.el8_8.11",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11.10-1.el9_7.3",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11.11-2.el9_8.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11.1-10.el9_0.11",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11.4-7.el9_2.8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11.7-2.el9_4.7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::highavailability"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11.9-2.el9_6.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:2.9::el9"
],
"defaultStatus": "unaffected",
"packageName": "lodash",
"product": "Streams for Apache Kafka 2.9.4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3.2::el9"
],
"defaultStatus": "unaffected",
"packageName": "lodash",
"product": "Streams for Apache Kafka 3.2.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839279",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840539",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839996",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
"product": "Migration Toolkit for Virtualization 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779139872",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
"product": "Migration Toolkit for Virtualization 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778927462",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-compat-rhel9",
"product": "Network Observability (NETOBSERV) 1.11.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778508956",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-rhel9",
"product": "Network Observability (NETOBSERV) 1.11.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778510461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/lightspeed-rhel8",
"product": "Red Hat Ansible Automation Platform 2.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777403872",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/lightspeed-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777387242",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776784286",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777903262",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-ocp-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502765",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-ocp-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194938",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-ocp-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-ui-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783690532",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780467029",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780467147",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779189627",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778473763",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778666987",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934080",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778517109",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/nmstate-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782269794",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778256287",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/nmstate-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779874967",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779256322",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/nmstate-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779249920",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778644858",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/nmstate-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778645008",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784148070",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502338",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782224390",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778076673",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778076741",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778076916",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077421",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778076861",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077066",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077002",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077164",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077913",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077379",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077455",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778078096",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077527",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077651",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077920",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077737",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778077839",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049594",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049298",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049745",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049818",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049920",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049945",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778060364",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050037",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050035",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050048",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050119",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050290",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778059723",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050352",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050482",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045210",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676191",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778044961",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783929816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045359",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094353",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045374",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093953",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045891",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094943",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045472",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045534",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676649",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045524",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676675",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045587",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094299",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778046067",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094725",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045627",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676820",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045731",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676883",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045700",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778046234",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784095175",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045792",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676977",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045858",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093503",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045945",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677297",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045931",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677345",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778046079",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776079019",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684360",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776706744",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684068",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707205",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054582",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707231",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054606",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707760",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055295",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707301",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684603",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776079295",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684668",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707362",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684667",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707418",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054873",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707377",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684707",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707947",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707456",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684779",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707526",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684831",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707526",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684839",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707945",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707569",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707724",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784056134",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707763",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685128",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707771",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685129",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776079774",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685375",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775822432",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667125",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776403457",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783666755",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776403991",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404009",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055387",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404539",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055726",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404060",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667517",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775822689",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667577",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404131",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667611",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406225",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055020",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406131",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667641",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406770",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406247",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667790",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406286",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667859",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406291",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667875",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406284",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406291",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667877",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406771",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055576",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406384",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406540",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055382",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406595",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668266",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406594",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668288",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775823207",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783669219",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.27::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/code-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.27",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776744110",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.27::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/dashboard-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.27",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776795511",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.27::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/openvsx-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.27",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776716842",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-jaeger-query-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435608",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.18::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/console-plugin-rhel8",
"product": "Red Hat OpenShift GitOps 1.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779115545",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/console-plugin-rhel8",
"product": "Red Hat OpenShift GitOps 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779210530",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776202125",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776191302",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151124",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151272",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151106",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151270",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776155669",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776149682",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151134",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151277",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-advisor-frontend-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777911535",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-host-inventory-frontend-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777498806",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-remediations-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776194798",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-search-ui-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776330093",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-pccs",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "affected",
"packageName": "lodash",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unaffected",
"packageName": "gatekeeper/gatekeeper-rhel9",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/cluster-logging-operator-bundle",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/cluster-logging-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/elasticsearch6-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/elasticsearch-operator-bundle",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/elasticsearch-proxy-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/elasticsearch-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/fluentd-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/kibana6-rhel8",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/log-file-metric-exporter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-curator5-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-view-plugin-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/vector-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "affected",
"packageName": "mta/mta-ui-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unaffected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/node-healthcheck-operator-bundle",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-remediation-console-rhel8",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-remediation-console-rhel9",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp20/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp21/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp22/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp24/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp25/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp26/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel7",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel8",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel9",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-dashboard-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-tech-preview/automation-dashboard-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-on-clouds/aoc-azure-aap-installer-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "automation-controller",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-eda-controller",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "automation-hub",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "affected",
"packageName": "lodash",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_registry:2"
],
"defaultStatus": "affected",
"packageName": "lodash",
"product": "Red Hat build of Apicurio Registry 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel8",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel9",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-studio-ui-rhel8",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:build_keycloak:"
],
"defaultStatus": "affected",
"packageName": "lodash",
"product": "Red Hat Build of Keycloak",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"packageName": "podman-desktop-macos-1-0",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"packageName": "podman-desktop-windows-1-0",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/rhcl-console-plugin-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhdh:1"
],
"defaultStatus": "affected",
"packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
"product": "Red Hat Developer Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:directory_server:11"
],
"defaultStatus": "unaffected",
"packageName": "redhat-ds:11/389-ds-base",
"product": "Red Hat Directory Server 11",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:directory_server:12"
],
"defaultStatus": "unaffected",
"packageName": "redhat-ds:12/389-ds-base",
"product": "Red Hat Directory Server 12",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:directory_server:13"
],
"defaultStatus": "unaffected",
"packageName": "389-ds-base",
"product": "Red Hat Directory Server 13",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "ceph",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "cockpit",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "cockpit-files",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "cockpit-machines",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "cockpit-podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "cockpit-session-recording",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gjs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "ipa",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "linux-sgx",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "qt6-qtbase",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "subscription-manager-cockpit",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "cockpit",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "cockpit-appstream",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8/cockpit-podman",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "mozjs60",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "qt5-qtbase",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "ceph",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "cockpit",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "cockpit-files",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "cockpit-machines",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "cockpit-podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gjs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "ipa",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "linux-sgx",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "qt5-qtbase",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "subscription-manager-cockpit",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "affected",
"packageName": "lodash",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
],
"defaultStatus": "affected",
"packageName": "lodash",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "lodash",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "lodash",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-dashboard-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kf-notebook-controller-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-notebook-controller-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/kubevirt-console-plugin",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
],
"defaultStatus": "affected",
"packageName": "lodash",
"product": "Red Hat Process Automation 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-babel-plugin-transform-class-properties",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-babel-preset-react",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-formik",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-openshift-dynamic-plugin-sdk",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-patternfly-react",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-patternfly-react-charts",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-patternfly-react-extensions",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-yup",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vulnerability-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7"
],
"defaultStatus": "affected",
"packageName": "lodash",
"product": "Red Hat Single Sign-On 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "unaffected",
"packageName": "rhtas/rhtas-console-ui-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_profile_analyzer:2"
],
"defaultStatus": "affected",
"packageName": "rhtpa/rhtpa-trustification-service-rhel9",
"product": "Red Hat Trusted Profile Analyzer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-portal",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
}
],
"datePublic": "2026-03-31T19:25:55.987Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function()."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-21T12:04:59.825Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"name": "RHBZ#2453496",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4800.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24762"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17789"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24331"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11470"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10713"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19008"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11493"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11494"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11495"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11454"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11469"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11516"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11471"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10710"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19167"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19409"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19410"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16874"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13553"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13545"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22619"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13826"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24977"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36621"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34100"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17598"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21658"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17448"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20042"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20041"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17469"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40795"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17468"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37186"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29795"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20943"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17549"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17550"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12279"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12277"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14870"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14871"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8498"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10131"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34608"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13571"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:17789: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:24331: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
},
{
"lang": "en",
"value": "RHSA-2026:11470: Red Hat Enterprise Linux High Availability EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:10713: Red Hat Enterprise Linux High Availability (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19008: Red Hat Enterprise Linux High Availability (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:11493: Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:11494: Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:11495: Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:11454: Red Hat Enterprise Linux High Availability E4S (v.9.0), Red Hat Enterprise Linux ResilientStorage E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:11469: Red Hat Enterprise Linux High Availability E4S (v.9.2), Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:11516: Red Hat Enterprise Linux High Availability EUS (v.9.4), Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:11471: Red Hat Enterprise Linux High Availability EUS (v.9.6), Red Hat Enterprise Linux Resilient Storage EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:10710: Red Hat Enterprise Linux High Availability (v. 9), Red Hat Enterprise Linux Resilient Storage (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19167: Red Hat Enterprise Linux High Availability (v. 9), Red Hat Enterprise Linux Resilient Storage (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19409: Migration Toolkit for Virtualization 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:19410: Migration Toolkit for Virtualization 2.9"
},
{
"lang": "en",
"value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.2"
},
{
"lang": "en",
"value": "RHSA-2026:13553: Red Hat Ansible Automation Platform 2.5"
},
{
"lang": "en",
"value": "RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:22619: Red Hat Data Grid 8.6.1"
},
{
"lang": "en",
"value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:36621: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:34100: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:21658: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:17448: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:20042: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:17469: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:40795: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:37186: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:29795: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
},
{
"lang": "en",
"value": "RHSA-2026:20946: Red Hat OpenShift GitOps 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:20943: Red Hat OpenShift GitOps 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.1"
},
{
"lang": "en",
"value": "RHSA-2026:17549: Red Hat Openshift Data Foundation 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:17550: Red Hat Openshift Data Foundation 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:17547: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:12279: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:12277: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:14870: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:14871: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:8498: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:10131: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:34608: Streams for Apache Kafka 2.9.4"
},
{
"lang": "en",
"value": "RHSA-2026:13571: Streams for Apache Kafka 3.2.0"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-31T20:01:21.918Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-31T19:25:55.987Z",
"value": "Made public."
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/lodash",
"product": "lodash",
"vendor": "lodash",
"versions": [
{
"lessThan": "4.18.0",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.18.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/lodash-es",
"product": "lodash-es",
"vendor": "lodash",
"versions": [
{
"lessThan": "4.18.0",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.18.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/lodash-amd",
"product": "lodash-amd",
"vendor": "lodash",
"versions": [
{
"lessThan": "4.18.0",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.18.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"packageURL": "pkg:npm/lodash.template",
"product": "lodash.template",
"vendor": "lodash",
"versions": [
{
"lessThan": "4.18.0",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.18.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "dolevmiz1"
},
{
"lang": "en",
"type": "reporter",
"value": "bugbunny-research"
},
{
"lang": "en",
"type": "reporter",
"value": "M0nd0R"
},
{
"lang": "en",
"type": "remediation developer",
"value": "UlisesGascon"
},
{
"lang": "en",
"type": "remediation reviewer",
"value": "falsyvalues"
},
{
"lang": "en",
"type": "remediation reviewer",
"value": "jonchurch"
},
{
"lang": "en",
"type": "reporter",
"value": "threalwinky"
},
{
"lang": "en",
"type": "remediation reviewer",
"value": "jdalton"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Impact:\n\nThe fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink.\n\nWhen an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.\n\nAdditionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().\n\nPatches:\n\nUsers should upgrade to version 4.18.0.\n\nWorkarounds:\n\nDo not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names."
}
],
"value": "Impact:\n\nThe fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink.\n\nWhen an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.\n\nAdditionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().\n\nPatches:\n\nUsers should upgrade to version 4.18.0.\n\nWorkarounds:\n\nDo not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-31T19:25:55.987Z",
"orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
"shortName": "openjs"
},
"references": [
{
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
},
{
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"title": "lodash vulnerable to Code Injection via `_.template` imports key names",
"x_generator": {
"engine": "cve-kit 1.0.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
"assignerShortName": "openjs",
"cveId": "CVE-2026-4800",
"datePublished": "2026-03-31T19:25:55.987Z",
"dateReserved": "2026-03-25T09:12:38.355Z",
"dateUpdated": "2026-07-21T12:04:59.825Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-4800",
"date": "2026-07-24",
"epss": "0.02566",
"percentile": "0.83484"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-4800\",\"sourceIdentifier\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"published\":\"2026-03-31T20:16:29.660\",\"lastModified\":\"2026-07-24T20:10:00.147\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Impact:\\n\\nThe fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink.\\n\\nWhen an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.\\n\\nAdditionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().\\n\\nPatches:\\n\\nUsers should upgrade to version 4.18.0.\\n\\nWorkarounds:\\n\\nDo not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names.\"},{\"lang\":\"es\",\"value\":\"Impacto:\\n\\nLa correcci\u00f3n para CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) a\u00f1adi\u00f3 validaci\u00f3n para la opci\u00f3n de variable en _.template pero no aplic\u00f3 la misma validaci\u00f3n a los nombres de clave de options.imports. Ambos caminos desembocan en el mismo sumidero del constructor Function().\\n\\nCuando una aplicaci\u00f3n pasa entrada no confiable como nombres de clave de options.imports, un atacante puede inyectar expresiones de par\u00e1metros predeterminados que ejecutan c\u00f3digo arbitrario en el momento de la compilaci\u00f3n de la plantilla.\\n\\nAdem\u00e1s, _.template utiliza assignInWith para fusionar importaciones, que enumera las propiedades heredadas a trav\u00e9s de for..in. Si Object.prototype ha sido contaminado por cualquier otro vector, las claves contaminadas se copian en el objeto imports y se pasan a Function().\\n\\nParches:\\n\\nLos usuarios deben actualizar a la versi\u00f3n 4.18.0.\\n\\nSoluciones provisionales:\\n\\nNo pase entrada no confiable como nombres de clave en options.imports. Utilice \u00fanicamente nombres de clave est\u00e1ticos y controlados por el desarrollador.\"}],\"affected\":[{\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"affectedData\":[{\"vendor\":\"lodash\",\"product\":\"lodash\",\"defaultStatus\":\"unaffected\",\"packageURL\":\"pkg:npm/lodash\",\"versions\":[{\"version\":\"4.0.0\",\"lessThan\":\"4.18.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.18.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"}]},{\"vendor\":\"lodash\",\"product\":\"lodash-es\",\"defaultStatus\":\"unaffected\",\"packageURL\":\"pkg:npm/lodash-es\",\"versions\":[{\"version\":\"4.0.0\",\"lessThan\":\"4.18.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.18.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"}]},{\"vendor\":\"lodash\",\"product\":\"lodash-amd\",\"defaultStatus\":\"unaffected\",\"packageURL\":\"pkg:npm/lodash-amd\",\"versions\":[{\"version\":\"4.0.0\",\"lessThan\":\"4.18.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.18.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"}]},{\"vendor\":\"lodash\",\"product\":\"lodash.template\",\"defaultStatus\":\"unaffected\",\"packageURL\":\"pkg:npm/lodash.template\",\"versions\":[{\"version\":\"4.0.0\",\"lessThan\":\"4.18.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.18.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-openshift-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:2.5.20260715-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:2.5.20260715-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-platform-ui\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:2.6.9-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8.6.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.12.1-1.el10_1.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:0.12.2-3.el10_2.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:94.3-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.12.0-3.el10_0.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::highavailability\"],\"versions\":[{\"version\":\"0:0.10.8-1.el8_4.11\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability\"],\"versions\":[{\"version\":\"0:0.10.8-1.el8_4.11\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6::highavailability\"],\"versions\":[{\"version\":\"0:0.10.12-6.el8_6.13\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6::highavailability\"],\"versions\":[{\"version\":\"0:0.10.12-6.el8_6.13\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8::highavailability\"],\"versions\":[{\"version\":\"0:0.10.15-4.el8_8.11\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::highavailability\"],\"versions\":[{\"version\":\"0:0.10.15-4.el8_8.11\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::highavailability\"],\"versions\":[{\"version\":\"0:0.11.10-1.el9_7.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:0.11.11-2.el9_8.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::highavailability\"],\"versions\":[{\"version\":\"0:0.11.1-10.el9_0.11\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::highavailability\"],\"versions\":[{\"version\":\"0:0.11.4-7.el9_2.8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::highavailability\"],\"versions\":[{\"version\":\"0:0.11.7-2.el9_4.7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::highavailability\"],\"versions\":[{\"version\":\"0:0.11.9-2.el9_6.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Streams for Apache Kafka 2.9.4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:amq_streams:2.9::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Streams for Apache Kafka 3.2.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3.2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839279\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840539\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839996\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"migration-toolkit-virtualization/mtv-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9\"],\"versions\":[{\"version\":\"1779139872\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"migration-toolkit-virtualization/mtv-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9\"],\"versions\":[{\"version\":\"1778927462\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability (NETOBSERV) 1.11.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"network-observability/network-observability-console-plugin-compat-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1.11::el9\"],\"versions\":[{\"version\":\"1778508956\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability (NETOBSERV) 1.11.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"network-observability/network-observability-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1.11::el9\"],\"versions\":[{\"version\":\"1778510461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-25/lightspeed-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"1777403872\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/lightspeed-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1777387242\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.8::el9\"],\"versions\":[{\"version\":\"1776784286\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1777903262\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-ocp-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502765\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-ocp-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194938\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194574\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-ocp-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783690532\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1780467029\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1780467147\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1779189627\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778473763\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778666987\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-networking-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"1782934080\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-networking-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1778517109\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/nmstate-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1782269794\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-networking-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1778256287\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/nmstate-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1779874967\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-networking-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1779256322\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/nmstate-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1779249920\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-networking-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1778644858\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/nmstate-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1778645008\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1784148070\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1783502338\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1782224390\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778076673\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778076741\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778076916\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077421\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778076861\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077066\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077002\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077164\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077913\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077379\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077455\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778078096\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077527\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077651\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077920\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077737\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"],\"versions\":[{\"version\":\"1778077839\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049594\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049298\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049745\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049818\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049920\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778060364\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050037\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050035\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050048\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050119\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050290\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778059723\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050352\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050482\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045210\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676191\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778044961\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783929816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045359\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094353\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045374\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784093953\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045891\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094943\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045534\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676649\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045524\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676675\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045587\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094299\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778046067\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094725\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045627\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676820\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045731\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676883\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045700\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778046234\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784095175\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676977\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045858\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784093503\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783677297\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045931\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783677345\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778046079\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783677533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776079019\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684360\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776706744\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684068\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707205\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054582\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707231\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054606\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707760\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055295\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707301\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684603\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776079295\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684668\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707362\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684667\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707418\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054873\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684707\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707947\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707456\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684779\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707526\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684831\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707526\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684839\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707569\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707724\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784056134\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707763\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783685128\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707771\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783685129\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776079774\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783685375\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1775822432\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776403457\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783666755\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776403991\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404009\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055387\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404539\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055726\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404060\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667517\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1775822689\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667577\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404131\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667611\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406225\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055020\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406131\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667641\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406770\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406247\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406286\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667859\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406291\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667875\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406291\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667877\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406771\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055576\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406384\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406540\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055382\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406595\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783668266\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406594\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783668288\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1775823207\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783669219\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.27\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/code-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"],\"versions\":[{\"version\":\"1776744110\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.27\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"],\"versions\":[{\"version\":\"1776795511\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.27\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/openvsx-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"],\"versions\":[{\"version\":\"1776716842\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-jaeger-query-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435608\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/console-plugin-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.18::el8\"],\"versions\":[{\"version\":\"1779115545\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/console-plugin-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.19::el8\"],\"versions\":[{\"version\":\"1779210530\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1776202125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1776191302\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1776151124\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1776151272\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776151106\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776151270\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776155669\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776149682\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1776151134\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1776151277\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-advisor-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1777911535\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-host-inventory-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1777498806\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-remediations-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1776194798\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-search-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1776330093\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-pccs\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/cluster-logging-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/cluster-logging-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/elasticsearch6-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/elasticsearch-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/elasticsearch-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/elasticsearch-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/fluentd-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/kibana6-rhel8\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/log-file-metric-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-curator5-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-view-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/vector-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-remediation-console-rhel8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-remediation-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp20/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp21/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp22/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp24/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp25/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp26/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel7\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel8\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel9\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-tech-preview/automation-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-on-clouds/aoc-azure-aap-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-eda-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-hub\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel - HawtIO 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:service_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-studio-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Keycloak\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:build_keycloak:\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman-desktop-macos-1-0\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman-desktop-windows-1-0\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/rhcl-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor\",\"cpes\":[\"cpe:/a:redhat:rhdh:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Directory Server 11\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-ds:11/389-ds-base\",\"cpes\":[\"cpe:/a:redhat:directory_server:11\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Directory Server 12\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-ds:12/389-ds-base\",\"cpes\":[\"cpe:/a:redhat:directory_server:12\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Directory Server 13\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"389-ds-base\",\"cpes\":[\"cpe:/a:redhat:directory_server:13\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ceph\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-files\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-machines\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-session-recording\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gjs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ipa\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"linux-sgx\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qt6-qtbase\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"subscription-manager-cockpit\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-appstream\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/cockpit-podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mozjs60\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qt5-qtbase\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ceph\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-files\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-machines\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gjs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ipa\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"linux-sgx\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"qt5-qtbase\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"subscription-manager-cockpit\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/disk-image-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kf-notebook-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-notebook-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Process Automation 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_bpms_platform:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-babel-plugin-transform-class-properties\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-babel-preset-react\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-formik\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-openshift-dynamic-plugin-sdk\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-patternfly-react\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-patternfly-react-charts\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-patternfly-react-extensions\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-yup\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vulnerability-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Single Sign-On 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lodash\",\"cpes\":[\"cpe:/a:redhat:red_hat_single_sign_on:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/rhtas-console-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Profile Analyzer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtpa/rhtpa-trustification-service-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_profile_analyzer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-portal\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-31T20:36:55.080392Z\",\"id\":\"CVE-2026-4800\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndExcluding\":\"4.18.0\",\"matchCriteriaId\":\"39F0989E-0B80-43AC-8991-A9DD5A80A46F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:lodash:lodash-amd:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndExcluding\":\"4.18.0\",\"matchCriteriaId\":\"D90D1890-8336-4908-AF2B-6FAFF0C1335A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:lodash:lodash-es:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndExcluding\":\"4.18.0\",\"matchCriteriaId\":\"8E7D1C16-4398-4ED8-B5DD-9D3B10BA0C22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:lodash:lodash.template:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndExcluding\":\"4.18.0\",\"matchCriteriaId\":\"D28F304B-AC93-4CAE-95BD-246998E0B009\"}]}]}],\"references\":[{\"url\":\"https://cna.openjsf.org/security-advisories.html\",\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/advisories/GHSA-35jh-r3h4-6jhm\",\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"tags\":[\"Not Applicable\"]},{\"url\":\"https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c\",\"source\":\"ce714d77-add3-4f53-aff5-83d477b104bb\",\"tags\":[\"Not Applicable\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10131\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10175\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10710\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10713\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11454\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11469\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11470\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11471\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11493\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11494\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11495\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11516\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12277\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12279\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13545\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13553\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13571\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13826\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14870\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14871\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16874\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17448\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17468\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17469\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17549\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17550\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17598\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17789\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19008\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19167\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19409\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19410\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20041\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20042\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20943\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21658\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22619\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24331\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24762\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24977\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29795\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34100\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34342\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34608\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36621\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37186\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40795\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40984\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41941\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41944\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42078\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8483\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8484\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8490\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8491\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8493\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8498\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9742\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-4800\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2453496\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4800.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-21T10:14:25+00:00",
"cve": "CVE-2026-4800",
"id": "CVE-2026-4800",
"initial_release_date": "2026-03-31T19:25:55.987000+00:00",
"product_status:fixed": "942",
"product_status:known_affected": "123",
"product_status:known_not_affected": "7097",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4800.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "critical",
"current_release_date": "2026-07-15T18:59:30Z",
"cve": "CVE-2026-4800",
"id": "CVE-2026-4800",
"initial_release_date": "2026-04-28T01:45:16Z",
"product_status:recommended": "5",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-4800",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-4800.json",
"version": "4"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"lodash: lodash: Arbitrary code execution via untrusted input in template imports\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-openshift-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.9-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-platform-ui\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8.6.1\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\", \"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.12.1-1.el10_1.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"0:0.12.2-3.el10_2.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:94.3-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cockpit-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.12.0-3.el10_0.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.8-1.el8_4.11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.8-1.el8_4.11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.12-6.el8_6.13\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.12-6.el8_6.13\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.15-4.el8_8.11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.15-4.el8_8.11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11.10-1.el9_7.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"0:0.11.11-2.el9_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11.1-10.el9_0.11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11.4-7.el9_2.8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11.7-2.el9_4.7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11.9-2.el9_6.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Streams for Apache Kafka 2.9.4\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Streams for Apache Kafka 3.2.0\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839279\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840539\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839996\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779139872\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"migration-toolkit-virtualization/mtv-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778927462\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"migration-toolkit-virtualization/mtv-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability (NETOBSERV) 1.11.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778508956\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"network-observability/network-observability-console-plugin-compat-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability (NETOBSERV) 1.11.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778510461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"network-observability/network-observability-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777403872\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-25/lightspeed-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777387242\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/lightspeed-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776784286\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777903262\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502765\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-ocp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194938\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-ocp-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-ocp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780467029\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780467147\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779189627\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778473763\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778666987\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934080\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-networking-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778517109\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-networking-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782269794\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/nmstate-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778256287\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-networking-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779874967\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/nmstate-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779256322\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-networking-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779249920\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/nmstate-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778644858\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-networking-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778645008\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/nmstate-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502338\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782224390\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778076673\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778076741\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778076916\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077421\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778076861\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077066\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077002\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077164\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077913\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077379\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077455\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778078096\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077527\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077651\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077920\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077737\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778077839\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049594\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049298\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049745\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049818\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049920\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778060364\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050037\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050035\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050048\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050119\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050290\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778059723\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050352\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050482\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045210\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778044961\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045359\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045374\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045891\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045534\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045524\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045587\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778046067\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045627\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045731\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045700\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778046234\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045858\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045931\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778046079\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776079019\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776706744\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707205\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707231\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707760\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707301\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776079295\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707362\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707418\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707947\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707456\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707526\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707526\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707569\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707724\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707763\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707771\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776079774\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775822432\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776403457\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783666755\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776403991\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784054598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404009\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055387\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404539\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055726\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404060\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667517\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775822689\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667577\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404131\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667611\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406225\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055020\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406131\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667641\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406770\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406247\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406286\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667859\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406291\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667875\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406291\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667877\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406771\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055576\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406384\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406540\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055382\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783668266\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406594\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783668288\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775823207\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783669219\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.27\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776744110\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/code-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.27\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776795511\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/dashboard-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.27\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776716842\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/openvsx-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435608\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-jaeger-query-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779115545\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/console-plugin-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779210530\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/console-plugin-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776202125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776191302\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151124\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151272\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151106\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151270\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776155669\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776149682\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151134\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151277\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777911535\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-advisor-frontend-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777498806\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-host-inventory-frontend-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776194798\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-remediations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776330093\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-search-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-pccs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/cluster-logging-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/cluster-logging-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/elasticsearch6-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/elasticsearch-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/elasticsearch-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/elasticsearch-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/fluentd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/kibana6-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/log-file-metric-exporter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-curator5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-view-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/vector-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-remediation-console-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-remediation-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp20/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp21/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp22/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp24/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp25/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp26/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/automation-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-tech-preview/automation-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-on-clouds/aoc-azure-aap-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-eda-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-hub\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel - HawtIO 4\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 2\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-studio-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:build_keycloak:\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Keycloak\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"podman-desktop-macos-1-0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"podman-desktop-windows-1-0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/rhcl-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub\", \"packageName\": \"rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:directory_server:11\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Directory Server 11\", \"packageName\": \"redhat-ds:11/389-ds-base\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:directory_server:12\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Directory Server 12\", \"packageName\": \"redhat-ds:12/389-ds-base\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:directory_server:13\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Directory Server 13\", \"packageName\": \"389-ds-base\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ceph\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"cockpit\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"cockpit-files\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"cockpit-machines\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"cockpit-podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"cockpit-session-recording\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gjs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ipa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"linux-sgx\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"qt6-qtbase\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"subscription-manager-cockpit\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"cockpit\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"cockpit-appstream\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/cockpit-podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"mozjs60\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"qt5-qtbase\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ceph\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"cockpit\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"cockpit-files\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"cockpit-machines\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"cockpit-podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gjs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ipa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"linux-sgx\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"qt5-qtbase\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"subscription-manager-cockpit\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/disk-image-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kf-notebook-controller-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-notebook-controller-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_bpms_platform:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Process Automation 7\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-babel-plugin-transform-class-properties\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-babel-preset-react\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-formik\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-openshift-dynamic-plugin-sdk\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-patternfly-react\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-patternfly-react-charts\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-patternfly-react-extensions\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-yup\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vulnerability-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_single_sign_on:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Single Sign-On 7\", \"packageName\": \"lodash\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/rhtas-console-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_profile_analyzer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Profile Analyzer\", \"packageName\": \"rhtpa/rhtpa-trustification-service-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/automation-portal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-31T20:01:21.918Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-31T19:25:55.987Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17789: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24331: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34342: Cluster Observability Operator 1.5.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11470: Red Hat Enterprise Linux High Availability EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10713: Red Hat Enterprise Linux High Availability (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19008: Red Hat Enterprise Linux High Availability (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11493: Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11494: Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11495: Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11454: Red Hat Enterprise Linux High Availability E4S (v.9.0), Red Hat Enterprise Linux ResilientStorage E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11469: Red Hat Enterprise Linux High Availability E4S (v.9.2), Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11516: Red Hat Enterprise Linux High Availability EUS (v.9.4), Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11471: Red Hat Enterprise Linux High Availability EUS (v.9.6), Red Hat Enterprise Linux Resilient Storage EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10710: Red Hat Enterprise Linux High Availability (v. 9), Red Hat Enterprise Linux Resilient Storage (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19167: Red Hat Enterprise Linux High Availability (v. 9), Red Hat Enterprise Linux Resilient Storage (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19409: Migration Toolkit for Virtualization 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19410: Migration Toolkit for Virtualization 2.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13553: Red Hat Ansible Automation Platform 2.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22619: Red Hat Data Grid 8.6.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9742: Red Hat Developer Hub 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13826: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24977: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19712: Red Hat OpenShift AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36621: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34100: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21658: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17448: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20042: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37186: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29795: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17469: Red Hat OpenShift Container Platform 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17468: Red Hat OpenShift Container Platform 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20946: Red Hat OpenShift GitOps 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20943: Red Hat OpenShift GitOps 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17549: Red Hat Openshift Data Foundation 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17550: Red Hat Openshift Data Foundation 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17547: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12279: Red Hat Openshift Data Foundation 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12277: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14870: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14871: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8498: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10131: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34608: Streams for Apache Kafka 2.9.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13571: Streams for Apache Kafka 3.2.0\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-31T19:25:55.987Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-4800\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2453496\", \"name\": \"RHBZ#2453496\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4800.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24762\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17789\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24331\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34342\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11470\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10713\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19008\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11493\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11494\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11495\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11454\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11469\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11516\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11471\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10710\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19167\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19409\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19410\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16874\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13553\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13545\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22619\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9742\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13826\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24977\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36621\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34100\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17598\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21658\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17448\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20042\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20041\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37186\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29795\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17469\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17468\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10175\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20943\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8483\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8484\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8490\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8491\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8493\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9385\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17549\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17550\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17547\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12279\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12277\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40984\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14870\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14871\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8498\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10131\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34608\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13571\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-94\", \"description\": \"Improper Control of Generation of Code (\u0027Code Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-20T12:04:52.468Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-4800\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-31T20:36:55.080392Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-31T20:36:59.980Z\"}}], \"cna\": {\"title\": \"lodash vulnerable to Code Injection via `_.template` imports key names\", \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"dolevmiz1\"}, {\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"bugbunny-research\"}, {\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"M0nd0R\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"UlisesGascon\"}, {\"lang\": \"en\", \"type\": \"remediation reviewer\", \"value\": \"falsyvalues\"}, {\"lang\": \"en\", \"type\": \"remediation reviewer\", \"value\": \"jonchurch\"}, {\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"threalwinky\"}, {\"lang\": \"en\", \"type\": \"remediation reviewer\", \"value\": \"jdalton\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 8.1, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"lodash\", \"product\": \"lodash\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0.0\", \"lessThan\": \"4.18.0\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.18.0\", \"versionType\": \"semver\"}], \"packageURL\": \"pkg:npm/lodash\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"lodash\", \"product\": \"lodash-es\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0.0\", \"lessThan\": \"4.18.0\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.18.0\", \"versionType\": \"semver\"}], \"packageURL\": \"pkg:npm/lodash-es\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"lodash\", \"product\": \"lodash-amd\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0.0\", \"lessThan\": \"4.18.0\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.18.0\", \"versionType\": \"semver\"}], \"packageURL\": \"pkg:npm/lodash-amd\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"lodash\", \"product\": \"lodash.template\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0.0\", \"lessThan\": \"4.18.0\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.18.0\", \"versionType\": \"semver\"}], \"packageURL\": \"pkg:npm/lodash.template\", \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://github.com/advisories/GHSA-35jh-r3h4-6jhm\"}, {\"url\": \"https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c\"}, {\"url\": \"https://cna.openjsf.org/security-advisories.html\"}], \"x_generator\": {\"engine\": \"cve-kit 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Impact:\\n\\nThe fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink.\\n\\nWhen an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.\\n\\nAdditionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().\\n\\nPatches:\\n\\nUsers should upgrade to version 4.18.0.\\n\\nWorkarounds:\\n\\nDo not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Impact:\\n\\nThe fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink.\\n\\nWhen an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.\\n\\nAdditionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().\\n\\nPatches:\\n\\nUsers should upgrade to version 4.18.0.\\n\\nWorkarounds:\\n\\nDo not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-94\", \"description\": \"CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"ce714d77-add3-4f53-aff5-83d477b104bb\", \"shortName\": \"openjs\", \"dateUpdated\": \"2026-03-31T19:25:55.987Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-4800\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-20T12:04:52.468Z\", \"dateReserved\": \"2026-03-25T09:12:38.355Z\", \"assignerOrgId\": \"ce714d77-add3-4f53-aff5-83d477b104bb\", \"datePublished\": \"2026-03-31T19:25:55.987Z\", \"assignerShortName\": \"openjs\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:42078
Vulnerability from csaf_redhat - Published: 2026-07-20 16:12 - Updated: 2026-07-24 18:17Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Severity
Important
Notes
Topic: Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
Security Fix(es):
* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)
* automation-controller: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (CVE-2026-8643)
* automation-controller: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)
* automation-gateway: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (CVE-2026-44492)
* automation-gateway: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (CVE-2026-44496)
* automation-gateway: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (CVE-2026-44494)
* automation-gateway: Axios: Information disclosure of proxy credentials via HTTP redirects (CVE-2026-44486)
* automation-gateway: Axios: Information disclosure of proxy credentials via redirect flows (CVE-2026-44487)
* automation-gateway: Axios: Denial of Service due to unenforced request and response size limits (CVE-2026-44488)
* automation-gateway: Axios: Information disclosure due to prototype pollution vulnerability (CVE-2026-44495)
* automation-gateway: fast-uri: URI authority bypass due to improper delimiter handling (CVE-2026-6322)
* automation-gateway: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget (CVE-2026-42044)
* automation-gateway: fast-uri: Path traversal vulnerability allows bypass of security policies (CVE-2026-6321)
* automation-gateway: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800)
* automation-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing (CVE-2026-12382)
* python3.12-pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport (CVE-2026-12701)
* receptor: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)
* receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
* receptor: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* receptor: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
For details about this release, refer to the release notes listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to write generated script wrappers outside the intended installation directory, leading to arbitrary file overwrite. This can severely impact system integrity and availability, and in certain scenarios, may lead to arbitrary code execution.
8.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
154 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
7.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
150 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed Subject header matching a legitimate client certificate DN to bypass mTLS authentication and inject arbitrary events into protected EDA event streams.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., "looking/normal/../../../../etc/shadow") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.
9.0 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
158 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
148 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
126 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
148 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
148 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
148 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Vendor Fix
fix
|
Known not affected
154 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
References
144 references
Acknowledgments
Tommaso Bona
Red Hat
Chris Meyers
Independent security researcher
Martin Brodeur
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)\n* automation-controller: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (CVE-2026-8643)\n* automation-controller: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)\n* automation-gateway: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (CVE-2026-44492)\n* automation-gateway: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (CVE-2026-44496)\n* automation-gateway: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (CVE-2026-44494)\n* automation-gateway: Axios: Information disclosure of proxy credentials via HTTP redirects (CVE-2026-44486)\n* automation-gateway: Axios: Information disclosure of proxy credentials via redirect flows (CVE-2026-44487)\n* automation-gateway: Axios: Denial of Service due to unenforced request and response size limits (CVE-2026-44488)\n* automation-gateway: Axios: Information disclosure due to prototype pollution vulnerability (CVE-2026-44495)\n* automation-gateway: fast-uri: URI authority bypass due to improper delimiter handling (CVE-2026-6322)\n* automation-gateway: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget (CVE-2026-42044)\n* automation-gateway: fast-uri: Path traversal vulnerability allows bypass of security policies (CVE-2026-6321)\n* automation-gateway: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800)\n* automation-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing (CVE-2026-12382)\n* python3.12-pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport (CVE-2026-12701)\n* receptor: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n* receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n* receptor: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n* receptor: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nFor details about this release, refer to the release notes listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42078",
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading"
},
{
"category": "external",
"summary": "2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2460927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460927"
},
{
"category": "external",
"summary": "2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "2466582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
},
{
"category": "external",
"summary": "2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "2489126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489126"
},
{
"category": "external",
"summary": "2490703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490703"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42078.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update",
"tracking": {
"current_release_date": "2026-07-24T18:17:13+00:00",
"generator": {
"date": "2026-07-24T18:17:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:42078",
"initial_release_date": "2026-07-20T16:12:52+00:00",
"revision_history": [
{
"date": "2026-07-20T16:12:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-20T16:12:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T18:17:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"product_id": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9ap.src",
"product": {
"name": "ansible-core-1:2.16.19-1.el9ap.src",
"product_id": "ansible-core-1:2.16.19-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9ap?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"product_id": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.16-1.el9ap.src",
"product": {
"name": "automation-hub-0:4.10.16-1.el9ap.src",
"product_id": "automation-hub-0:4.10.16-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.16-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.20-1.el9ap.src",
"product": {
"name": "automation-eda-controller-0:1.1.20-1.el9ap.src",
"product_id": "automation-eda-controller-0:1.1.20-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.20-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"product_id": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.16-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260715-1.el9ap.src",
"product": {
"name": "automation-gateway-0:2.5.20260715-1.el9ap.src",
"product_id": "automation-gateway-0:2.5.20260715-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260715-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.src",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.src",
"product_id": "receptor-0:1.6.6-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.src",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.src",
"product_id": "automation-controller-0:4.6.30-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"product": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"product_id": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-ansible@0.25.6-1.el9ap?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"product_id": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el8ap.src",
"product": {
"name": "ansible-core-1:2.16.19-1.el8ap.src",
"product_id": "ansible-core-1:2.16.19-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el8ap?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.src",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.src",
"product_id": "python3.12-gitpython-0:3.1.50-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.16-1.el8ap.src",
"product": {
"name": "automation-hub-0:4.10.16-1.el8ap.src",
"product_id": "automation-hub-0:4.10.16-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.16-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"product_id": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.16-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260715-1.el8ap.src",
"product": {
"name": "automation-gateway-0:2.5.20260715-1.el8ap.src",
"product_id": "automation-gateway-0:2.5.20260715-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260715-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.20-1.el8ap.src",
"product": {
"name": "automation-eda-controller-0:1.1.20-1.el8ap.src",
"product_id": "automation-eda-controller-0:1.1.20-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.20-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.src",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.src",
"product_id": "receptor-0:1.6.6-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.src",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.src",
"product_id": "automation-controller-0:4.6.30-2.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"product": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"product_id": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-ansible@0.25.6-1.el8ap?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"product_id": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"product": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"product_id": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt%2Bcrypto@2.13.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product_id": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-test-1:2.16.19-1.el9ap.noarch",
"product": {
"name": "ansible-test-1:2.16.19-1.el9ap.noarch",
"product_id": "ansible-test-1:2.16.19-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-test@2.16.19-1.el9ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"product_id": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.16-1.el9ap.noarch",
"product": {
"name": "automation-hub-0:4.10.16-1.el9ap.noarch",
"product_id": "automation-hub-0:4.10.16-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.16-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"product_id": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.16-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"product": {
"name": "automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"product_id": "automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260715-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"product": {
"name": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"product_id": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-config@2.5.20260715-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"product": {
"name": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"product_id": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-server@2.5.20260715-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product_id": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.6-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"product_id": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.6.30-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-server-0:4.6.30-2.el9ap.noarch",
"product": {
"name": "automation-controller-server-0:4.6.30-2.el9ap.noarch",
"product_id": "automation-controller-server-0:4.6.30-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-server@4.6.30-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"product": {
"name": "automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"product_id": "automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-ui@4.6.30-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"product": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"product_id": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-ansible@0.25.6-1.el9ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"product_id": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"product": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"product_id": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt%2Bcrypto@2.13.0-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el8ap.noarch",
"product": {
"name": "ansible-core-1:2.16.19-1.el8ap.noarch",
"product_id": "ansible-core-1:2.16.19-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el8ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-test-1:2.16.19-1.el8ap.noarch",
"product": {
"name": "ansible-test-1:2.16.19-1.el8ap.noarch",
"product_id": "ansible-test-1:2.16.19-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-test@2.16.19-1.el8ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"product_id": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.16-1.el8ap.noarch",
"product": {
"name": "automation-hub-0:4.10.16-1.el8ap.noarch",
"product_id": "automation-hub-0:4.10.16-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.16-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"product_id": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.16-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"product": {
"name": "automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"product_id": "automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260715-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"product": {
"name": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"product_id": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-config@2.5.20260715-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"product": {
"name": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"product_id": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-server@2.5.20260715-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.6-1.el8ap.noarch",
"product": {
"name": "receptorctl-0:1.6.6-1.el8ap.noarch",
"product_id": "receptorctl-0:1.6.6-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.6-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"product_id": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.6.30-2.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-server-0:4.6.30-2.el8ap.noarch",
"product": {
"name": "automation-controller-server-0:4.6.30-2.el8ap.noarch",
"product_id": "automation-controller-server-0:4.6.30-2.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-server@4.6.30-2.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"product": {
"name": "automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"product_id": "automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-ui@4.6.30-2.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"product": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"product_id": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-ansible@0.25.6-1.el8ap?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.x86_64",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.x86_64",
"product_id": "automation-controller-0:4.6.30-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.x86_64",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.x86_64",
"product_id": "receptor-0:1.6.6-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.x86_64",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.x86_64",
"product_id": "automation-controller-0:4.6.30-2.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el8ap?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.ppc64le",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.ppc64le",
"product_id": "receptor-0:1.6.6-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.ppc64le",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.ppc64le",
"product_id": "automation-controller-0:4.6.30-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.ppc64le",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.ppc64le",
"product_id": "receptor-0:1.6.6-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.ppc64le",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.ppc64le",
"product_id": "automation-controller-0:4.6.30-2.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el8ap?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.s390x",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.s390x",
"product_id": "receptor-0:1.6.6-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.s390x",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.s390x",
"product_id": "automation-controller-0:4.6.30-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.s390x",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.s390x",
"product_id": "receptor-0:1.6.6-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"product_id": "receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.s390x",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.s390x",
"product_id": "automation-controller-0:4.6.30-2.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el8ap?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.aarch64",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.aarch64",
"product_id": "automation-controller-0:4.6.30-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.aarch64",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.aarch64",
"product_id": "receptor-0:1.6.6-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.aarch64",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.aarch64",
"product_id": "automation-controller-0:4.6.30-2.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el8ap?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.30-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-test-1:2.16.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch"
},
"product_reference": "ansible-test-1:2.16.19-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.30-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-server-0:4.6.30-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch"
},
"product_reference": "automation-controller-server-0:4.6.30-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-ui-0:4.6.30-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch"
},
"product_reference": "automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.20-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src"
},
"product_reference": "automation-eda-controller-0:1.1.20-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260715-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch"
},
"product_reference": "automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260715-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src"
},
"product_reference": "automation-gateway-0:2.5.20260715-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch"
},
"product_reference": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch"
},
"product_reference": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.16-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch"
},
"product_reference": "automation-hub-0:4.10.16-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.16-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src"
},
"product_reference": "automation-hub-0:4.10.16-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch"
},
"product_reference": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src"
},
"product_reference": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch"
},
"product_reference": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.30-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-test-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-test-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.30-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-server-0:4.6.30-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch"
},
"product_reference": "automation-controller-server-0:4.6.30-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-ui-0:4.6.30-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch"
},
"product_reference": "automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.20-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src"
},
"product_reference": "automation-eda-controller-0:1.1.20-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260715-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch"
},
"product_reference": "automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260715-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src"
},
"product_reference": "automation-gateway-0:2.5.20260715-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch"
},
"product_reference": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
},
"product_reference": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.16-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch"
},
"product_reference": "automation-hub-0:4.10.16-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.16-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src"
},
"product_reference": "automation-hub-0:4.10.16-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch"
},
"product_reference": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src"
},
"product_reference": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-6321",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-04T20:01:14.938426+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466582"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6321"
},
{
"category": "external",
"summary": "RHBZ#2466582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
}
],
"release_date": "2026-05-04T19:31:57.253000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-8643",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-04-22T23:09:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to write generated script wrappers outside the intended installation directory, leading to arbitrary file overwrite. This can severely impact system integrity and availability, and in certain scenarios, may lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in pip\u0027s wheel installation process allows for arbitrary file overwrite due to path traversal. An attacker could exploit this by convincing a user to install a specially crafted malicious Python wheel. While file overwrites are limited to the installing user\u0027s permissions, using `pip install` with elevated privileges in Red Hat environments significantly increases the potential impact, potentially leading to system integrity compromise or arbitrary code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8643"
},
{
"category": "external",
"summary": "RHBZ#2460927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8643",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8643"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8643",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8643"
},
{
"category": "external",
"summary": "https://github.com/pypa/pip/commit/8eb178480bd1a2b223f509fc430796b265158dfb",
"url": "https://github.com/pypa/pip/commit/8eb178480bd1a2b223f509fc430796b265158dfb"
}
],
"release_date": "2026-05-27T17:03:36.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid installing Python wheels from untrusted sources. It is strongly advised against using `pip install` with elevated privileges, such as `sudo`, when installing wheels. Additionally, administrators should inspect `entry_points.txt` within wheels for path separators or absolute paths before installation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite"
},
{
"acknowledgments": [
{
"names": [
"Tommaso Bona"
]
}
],
"cve": "CVE-2026-11332",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-04-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485379"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role\u0027s meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Conditions for Exploitation: Successful exploitation requires user interaction, specifically tricking a victim into installing a maliciously crafted Ansible role (or a role with a malicious dependency) using the ansible-galaxy role install command.\n\nBroad Impact: While user interaction is required, the potential impact is highly severe. Successfully injecting the malicious arguments allows a remote attacker to achieve arbitrary code execution on the machine running the Ansible command, leading to a full compromise of the user\u0027s environment and system integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11332"
},
{
"category": "external",
"summary": "RHBZ#2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332"
},
{
"category": "external",
"summary": "https://github.com/ansible/ansible",
"url": "https://github.com/ansible/ansible"
}
],
"release_date": "2026-06-05T07:12:55.739000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution"
},
{
"acknowledgments": [
{
"names": [
"Chris Meyers"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-12382",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-06-16T10:01:29.314000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489126"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed Subject header matching a legitimate client certificate DN to bypass mTLS authentication and inject arbitrary events into protected EDA event streams.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects AAP deployments that use mTLS-protected EDA external event streams. The Gateway component introduced in AAP 2.5 contains the Envoy proxy routing configuration. AAP 2.4 uses a different architecture (no Gateway/Envoy) and is not affected by this specific flaw, though the EDA-side trust-of-Subject-header issue (tracked separately) may still apply to AAP 2.4 deployments using mTLS with a different proxy configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12382"
},
{
"category": "external",
"summary": "RHBZ#2489126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12382"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12382",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12382"
}
],
"release_date": "2026-07-15T17:12:31.720000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "The following practices would help for avoiding exposure and mitigate this flaw:\n\n- Restrict network access to the non-mTLS EDA event stream route (/eda-event-streams/) at the firewall or load balancer level, allowing only trusted internal sources.\n- If mTLS-protected event streams are in use, ensure that only the /mtls/eda-event-streams/ route is accessible from untrusted networks.\n- Monitor EDA event stream activity for unexpected events_received counter increases that may indicate unauthorized event injection.\n- Review Envoy proxy logs for requests to the non-mTLS event stream route from unexpected source IPs.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing"
},
{
"acknowledgments": [
{
"names": [
"Martin Brodeur"
],
"organization": "Independent security researcher"
}
],
"cve": "CVE-2026-12701",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-04-24T02:44:10+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490703"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with \"/\" but fails to block directory traversal sequences such as \"../\" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., \"looking/normal/../../../../etc/shadow\") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because an authenticated administrator can achieve arbitrary file write outside the intended export directory with fully attacker-controlled content. The FilesystemExport API is restricted to admin-level users (in Satellite, authenticated via SSL certificate; in standalone RBAC deployments, admin role only). The Pulp process runs as the \"pulp\" system user (not root), and file permission bits cannot be controlled by the attacker. However, the \"pulp\" user typically has write access to service-critical paths, and attack vectors such as cron.d entries (text-parsed, no exec bit required) or overwriting Pulp configuration remain viable depending on filesystem permissions and SELinux policy. Red Hat Satellite and Red Hat Ansible Automation Hub ship pulpcore and are affected. RHUI is not affected because end users do not have access to Pulp content creation APIs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12701"
},
{
"category": "external",
"summary": "RHBZ#2490703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490703"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12701",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12701"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12701",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12701"
}
],
"release_date": "2026-07-20T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If FilesystemExport was never configured on your deployment, you are not affected by this issue.\n2. If FilesystemExporters exist in the database, audit them for path traversal sequences (\"../\"). Existing malicious entries must be cleaned up manually, as the validation functions documented to raise ValidationError do not actually do so in all code paths.\n3. Restrict admin-level access to the Pulp API to only trusted operators. Review and audit which accounts have administrator privileges.\n4. Ensure SELinux is in enforcing mode on Satellite/Pulp servers to limit the directories the Pulp service user can write to.\n5. Monitor filesystem changes outside of expected Pulp directories for signs of exploitation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
}
]
}
RHSA-2026:8483
Vulnerability from csaf_redhat - Published: 2026-04-16 13:44 - Updated: 2026-07-24 18:15Summary
Red Hat Security Advisory: Kiali 1.73.29 for Red Hat OpenShift Service Mesh 2.6
Severity
Critical
Notes
Topic: Kiali 1.73.29 for Red Hat OpenShift Service Mesh 2.6 is now available.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 1.73.29, for Red Hat OpenShift Service Mesh 2.6, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-61726 Memory exhaustion in query parameter parsing in net/url (OSSM-12470)
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13225, OSSM-13226)
* CVE-2025-68121 Unexpected session resumption in crypto/tls (OSSM-12553)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12952)
* CVE-2026-27606 Rollup: Remote Code Execution via Path Traversal Vulnerability (OSSM-12689)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12891)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-12970, OSSM-12971)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-12996)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13112, OSSM-13113)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13249, OSSM-13250)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Threats
Impact
Moderate
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Rollup, a JavaScript module bundler. Insecure file name sanitization in the core engine allows an attacker to control output filenames, potentially through command-line interface (CLI) inputs, manual chunk aliases, or malicious plugins. By using directory traversal sequences (`../`), an attacker can overwrite files anywhere on the host filesystem where the build process has write permissions. This vulnerability can lead to persistent remote code execution (RCE) by overwriting critical system or user configuration files.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
91 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 1.73.29 for Red Hat OpenShift Service Mesh 2.6 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 1.73.29, for Red Hat OpenShift Service Mesh 2.6, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-61726 Memory exhaustion in query parameter parsing in net/url (OSSM-12470)\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13225, OSSM-13226)\n* CVE-2025-68121 Unexpected session resumption in crypto/tls (OSSM-12553)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12952)\n* CVE-2026-27606 Rollup: Remote Code Execution via Path Traversal Vulnerability (OSSM-12689)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12891)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-12970, OSSM-12971)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-12996)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13112, OSSM-13113)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13249, OSSM-13250)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8483",
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27606",
"url": "https://access.redhat.com/security/cve/CVE-2026-27606"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8483.json"
}
],
"title": "Red Hat Security Advisory: Kiali 1.73.29 for Red Hat OpenShift Service Mesh 2.6",
"tracking": {
"current_release_date": "2026-07-24T18:15:13+00:00",
"generator": {
"date": "2026-07-24T18:15:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:8483",
"initial_release_date": "2026-04-16T13:44:17+00:00",
"revision_history": [
{
"date": "2026-04-16T13:44:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T18:15:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 2.6",
"product": {
"name": "Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:2.6::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256%3Ad4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776191302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256%3A5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776202125"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256%3A7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776191302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256%3A6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776202125"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256%3Aecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776191302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256%3Ae7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776202125"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256%3A56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776191302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256%3A2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776202125"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64 as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64 as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64 as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64 as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27606",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-02-25T04:01:24.449922+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442530"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Rollup, a JavaScript module bundler. Insecure file name sanitization in the core engine allows an attacker to control output filenames, potentially through command-line interface (CLI) inputs, manual chunk aliases, or malicious plugins. By using directory traversal sequences (`../`), an attacker can overwrite files anywhere on the host filesystem where the build process has write permissions. This vulnerability can lead to persistent remote code execution (RCE) by overwriting critical system or user configuration files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27606"
},
{
"category": "external",
"summary": "RHBZ#2442530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442530"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27606",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27606"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27606",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27606"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2",
"url": "https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e",
"url": "https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3",
"url": "https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/releases/tag/v2.80.0",
"url": "https://github.com/rollup/rollup/releases/tag/v2.80.0"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/releases/tag/v3.30.0",
"url": "https://github.com/rollup/rollup/releases/tag/v3.30.0"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/releases/tag/v4.59.0",
"url": "https://github.com/rollup/rollup/releases/tag/v4.59.0"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc",
"url": "https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc"
}
],
"release_date": "2026-02-25T02:08:06.682000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:44:17+00:00",
"details": "See Kiali 1.73.29 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:2723d4214014bab37f24dd8311306f757bf12284085ed6c2bcd8176478a2e1b0_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:5a8f7d36fcf35bfc9260ac3e3629790d607405ecd692a9d87c29b1257cfb6d51_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:6c99c3ca8c99dfa4d49e6be2dd651345a4f6e2267fb2e06ab8acec04880d71c9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:e7a923633d55a9b67580732d7449e2631b07787ae22431888245dc234bca5871_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:7eb2835c07bac105bfa2661398245cbebbc7acf9924229b8dce38db7dd3fabbb_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:d4a4b0719e113cdbfd763946d8c9e1adf9d59352657680abec71a7094fc73a4d_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ecb548342d0ea45b30c965e86678068c5735bd603b7d6507308f5566f7b8c7cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:8484
Vulnerability from csaf_redhat - Published: 2026-04-16 13:49 - Updated: 2026-07-24 18:15Summary
Red Hat Security Advisory: Kiali 2.4.15 for Red Hat OpenShift Service Mesh 3.0
Severity
Critical
Notes
Topic: Kiali 2.4.15 for Red Hat OpenShift Service Mesh 3.0 is now available.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.4.15, for Red Hat OpenShift Service Mesh 3.0, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13227, OSSM-13230)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12919)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12893, OSSM-12894)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-12973, OSSM-12974)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13005)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13115, OSSM-13116)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13252, OSSM-13253)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
61 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.4.15 for Red Hat OpenShift Service Mesh 3.0 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.4.15, for Red Hat OpenShift Service Mesh 3.0, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13227, OSSM-13230)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12919)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12893, OSSM-12894)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-12973, OSSM-12974)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13005)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13115, OSSM-13116)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13252, OSSM-13253)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8484",
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8484.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.4.15 for Red Hat OpenShift Service Mesh 3.0",
"tracking": {
"current_release_date": "2026-07-24T18:15:10+00:00",
"generator": {
"date": "2026-07-24T18:15:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:8484",
"initial_release_date": "2026-04-16T13:49:55+00:00",
"revision_history": [
{
"date": "2026-04-16T13:49:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T18:15:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.0",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151272"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151124"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Acea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151272"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Add25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151124"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151272"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151124"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Afa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151272"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151124"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64 as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64 as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64 as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64 as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:49:55+00:00",
"details": "See Kiali 2.4.15 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:49:55+00:00",
"details": "See Kiali 2.4.15 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:49:55+00:00",
"details": "See Kiali 2.4.15 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:49:55+00:00",
"details": "See Kiali 2.4.15 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:49:55+00:00",
"details": "See Kiali 2.4.15 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:49:55+00:00",
"details": "See Kiali 2.4.15 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T13:49:55+00:00",
"details": "See Kiali 2.4.15 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:050ae2cf325aaac9bd5b3d2bc6ed3f021120870e53350a76f0639fef137f94d6_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:483c69a961bb2a8c634ad8714eae527bb90ab069a4675d4b7f5d3c9e7d0967ba_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:90993dd0e36bb81ef2f1bdf0b4bedcf7e38ac306430bb00dbfc8073e71469413_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:dd25f7254df085c0a07ab0c201708421f25c7723b8949c417a16c502665e3582_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:58a964558cc55d38fa87d06c6e9227f99a541e8990d42ef9338db331c38558ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cea8f8cfbad86373b6429885178d4f0801977dadf34cec5c467e77869bc00be6_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fa805db56492d577764b08d3aafa881f7e22165135a1c0afafa6c9115fbcf534_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:8490
Vulnerability from csaf_redhat - Published: 2026-04-16 14:03 - Updated: 2026-07-24 20:17Summary
Red Hat Security Advisory: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1
Severity
Critical
Notes
Topic: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1 is now available.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.11.9, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13231, OSSM-13234)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12921)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12897, OSSM-12898)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-12977, OSSM-12978)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13012)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13119, OSSM-13120)
* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13147)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13256, OSSM-13257)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
68 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.11.9, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13231, OSSM-13234)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12921)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12897, OSSM-12898)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-12977, OSSM-12978)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13012)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13119, OSSM-13120)\n* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13147)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13256, OSSM-13257)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8490",
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8490.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1",
"tracking": {
"current_release_date": "2026-07-24T20:17:52+00:00",
"generator": {
"date": "2026-07-24T20:17:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:8490",
"initial_release_date": "2026-04-16T14:03:40+00:00",
"revision_history": [
{
"date": "2026-04-16T14:03:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T20:17:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.1",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Af16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Af341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Adf2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Afd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Ae419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:8491
Vulnerability from csaf_redhat - Published: 2026-04-16 14:30 - Updated: 2026-07-24 20:17Summary
Red Hat Security Advisory: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2
Severity
Critical
Notes
Topic: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2 is now available.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.17.6, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13235, OSSM-13236)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12922)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12900, OSSM-12901)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-12980, OSSM-12981)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13018)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13122, OSSM-13123)
* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13162)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13259, OSSM-13260)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
68 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.17.6, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13235, OSSM-13236)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12922)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12900, OSSM-12901)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-12980, OSSM-12981)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13018)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13122, OSSM-13123)\n* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13162)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13259, OSSM-13260)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8491",
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8491.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2",
"tracking": {
"current_release_date": "2026-07-24T20:17:52+00:00",
"generator": {
"date": "2026-07-24T20:17:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:8491",
"initial_release_date": "2026-04-16T14:30:52+00:00",
"revision_history": [
{
"date": "2026-04-16T14:30:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T20:17:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.2",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Ae43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ada74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:8493
Vulnerability from csaf_redhat - Published: 2026-04-16 14:41 - Updated: 2026-07-24 20:17Summary
Red Hat Security Advisory: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3
Severity
Critical
Notes
Topic: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3 is now available.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.22.2, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13237, OSSM-13238)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-13272)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-13274, OSSM-13275)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-13276, OSSM-13277, OSSM-13278)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13279, OSSM-13280)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13281, OSSM-13282)
* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13283)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13284, OSSM-13285)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Threats
Impact
Important
References
68 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.22.2, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13237, OSSM-13238)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-13272)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-13274, OSSM-13275)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-13276, OSSM-13277, OSSM-13278)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13279, OSSM-13280)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13281, OSSM-13282)\n* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13283)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13284, OSSM-13285)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8493",
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8493.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3",
"tracking": {
"current_release_date": "2026-07-24T20:17:53+00:00",
"generator": {
"date": "2026-07-24T20:17:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:8493",
"initial_release_date": "2026-04-16T14:41:31+00:00",
"revision_history": [
{
"date": "2026-04-16T14:41:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T20:17:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.3",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Adaa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-operator-bundle@sha256%3Ac93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776225903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ace46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3Aa69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Afe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Aea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Afd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:8498
Vulnerability from csaf_redhat - Published: 2026-04-16 15:09 - Updated: 2026-07-21 10:19Summary
Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image
Severity
Important
Notes
Topic: A new satellite/iop-remediations-rhel9 container image is now generally available in the Red Hat container registry.
Details: Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings. When you install Red Hat Lightspeed in Satellite locally, you can generate Red Hat Lightspeed recommendations without sending system data to Red Hat services.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Sequelize, a Node.js Object-Relational Mapper (ORM) tool. A remote attacker can exploit a SQL injection vulnerability by manipulating JSON object keys during JSON/JSONB where clause processing. This allows for the injection of arbitrary SQL commands due to the improper handling of cast types. The primary consequence is the potential for unauthorized data exfiltration from any database table.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new satellite/iop-remediations-rhel9 container image is now generally available in the Red Hat container registry.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings. When you install Red Hat Lightspeed in Satellite locally, you can generate Red Hat Lightspeed recommendations without sending system data to Red Hat services. ",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8498",
"url": "https://access.redhat.com/errata/RHSA-2026:8498"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30951",
"url": "https://access.redhat.com/security/cve/CVE-2026-30951"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/software/containers/search",
"url": "https://catalog.redhat.com/software/containers/search"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/installing_satellite_server_in_a_connected_network_environment/performing-additional-configuration-on-server_satellite#installing-and-configuring-red-hat-lightspeed-in-satellite",
"url": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/installing_satellite_server_in_a_connected_network_environment/performing-additional-configuration-on-server_satellite#installing-and-configuring-red-hat-lightspeed-in-satellite"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/installing_satellite_server_in_a_disconnected_network_environment/performing-additional-configuration#installing-and-configuring-red-hat-lightspeed-in-satellite",
"url": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/installing_satellite_server_in_a_disconnected_network_environment/performing-additional-configuration#installing-and-configuring-red-hat-lightspeed-in-satellite"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8498.json"
}
],
"title": "Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image",
"tracking": {
"current_release_date": "2026-07-21T10:19:59+00:00",
"generator": {
"date": "2026-07-21T10:19:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:8498",
"initial_release_date": "2026-04-16T15:09:56+00:00",
"revision_history": [
{
"date": "2026-04-16T15:09:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T10:19:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.18",
"product": {
"name": "Red Hat Satellite 6.18",
"product_id": "Red Hat Satellite 6.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64",
"product": {
"name": "registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64",
"product_id": "registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/iop-remediations-rhel9@sha256%3A94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c?arch=amd64\u0026repository_url=registry.redhat.io/satellite\u0026tag=1776194798"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64 as a component of Red Hat Satellite 6.18",
"product_id": "Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64"
},
"product_reference": "registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64",
"relates_to_product_reference": "Red Hat Satellite 6.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T15:09:56+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8498"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-30951",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-03-10T21:01:17.729955+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446250"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sequelize, a Node.js Object-Relational Mapper (ORM) tool. A remote attacker can exploit a SQL injection vulnerability by manipulating JSON object keys during JSON/JSONB where clause processing. This allows for the injection of arbitrary SQL commands due to the improper handling of cast types. The primary consequence is the potential for unauthorized data exfiltration from any database table.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sequelize: Sequelize: Data exfiltration via SQL injection in JSON/JSONB where clause processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30951"
},
{
"category": "external",
"summary": "RHBZ#2446250",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446250"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30951",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30951"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30951",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30951"
},
{
"category": "external",
"summary": "https://github.com/sequelize/sequelize/security/advisories/GHSA-6457-6jrx-69cr",
"url": "https://github.com/sequelize/sequelize/security/advisories/GHSA-6457-6jrx-69cr"
}
],
"release_date": "2026-03-10T20:22:46.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T15:09:56+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8498"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.18:registry.redhat.io/satellite/iop-remediations-rhel9@sha256:94bfbcac75fca25a6babc06844a05703c5e745939c62288131f56e039877601c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sequelize: Sequelize: Data exfiltration via SQL injection in JSON/JSONB where clause processing"
}
]
}
RHSA-2026:9385
Vulnerability from csaf_redhat - Published: 2026-04-21 15:08 - Updated: 2026-07-24 20:17Summary
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
Severity
Important
Notes
Topic: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 has been released
Details: This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements and bug fixes.
Breaking changes:
* None.
Deprecations:
* None.
Technology Preview features:
* None.
Enhancements:
* None.
Bug fixes:
* gRPC-Go authorization bypass vulnerability fix: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 :path pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed :path that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the :path pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.
* XPath component fix: Previously, the github.com/antchfx/xpath component did not properly handle certain Boolean XPath expressions. A remote attacker could submit a crafted expression that caused an infinite loop, resulting in 100% CPU utilization and a denial-of-service condition. With this update, the XPath component correctly processes Boolean expressions that evaluate to true. The system no longer enters an infinite loop when handling these expressions. For more information, see https://access.redhat.com/security/cve/cve-2026-4645.
* Go JOSE denial-of-service vulnerability fix: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial-of-service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.
* Lodash _.template function fix: Previously, the lodash _.template function validated the variable option but did not validate options.imports key names. Both options passed values to the same code execution path. An attacker with the ability to control options.imports key names or pollute Object.prototype could exploit this gap to execute arbitrary code. With this update, lodash validates options.imports key names by using the same rules applied to the variable option. The _.template function rejects invalid key names and prevents code injection through this path. For more information, see https://access.redhat.com/security/cve/cve-2026-4800.
* Go crypto/x509 and crypto/tls packages fix: Previously, the Go standard library crypto/x509 and crypto/tls packages did not limit the number of intermediate certificates processed during certificate chain building. An attacker could provide an excessive number of intermediate certificates, causing the system to perform an uncontrolled amount of work and resulting in a denial-of-service condition. With this update, the packages limit the number of intermediate certificates accepted during certificate chain validation. The system rejects certificate chains that exceed this limit. For more information, see https://access.redhat.com/security/cve/cve-2026-32280.
* Go Root.Chmod function fix: Previously, the Root.Chmod function in the Go standard library internal/syscall/unix package had a race condition between checking and modifying a target file. An attacker could replace the target with a symbolic link after the check but before the operation completed, causing the permission change to apply to the linked file instead. This allowed an attacker to bypass directory restrictions and change permissions on unintended files. With this update, the Root.Chmod function prevents this race condition. The function no longer follows symbolic links that replace the target during execution. For more information, see https://access.redhat.com/security/cve/cve-2026-32282.
* Go crypto/x509 package fix: Previously, the Go crypto/x509 package applied excluded DNS constraints to wildcard Subject Alternative Names (SANs) in a case-sensitive manner. An attacker could bypass certificate validation by using a different case in the wildcard SAN than the excluded DNS constraint specified. This allowed the system to accept a malicious certificate that should have been rejected. With this update, the package applies DNS constraints case-insensitively when validating wildcard SANs. Certificate chain verification correctly rejects certificates that match excluded DNS constraints regardless of case. For more information, see https://access.redhat.com/security/cve/cve-2026-33810.
* Go crypto/tls component fix: Previously, the Go crypto/tls component did not re-validate certificates against updated certificate authority (CA) settings during TLS session resumption. If CA settings changed between the initial handshake and a resumed session, the component used the original CA settings. An attacker could exploit this to bypass certificate validation and establish a connection that should have been rejected. With this update, the component validates certificates against the current CA settings during session resumption. Resumed sessions that no longer meet CA requirements are rejected. For more information, see https://access.redhat.com/security/cve/cve-2025-68121.
* jsonparser Delete function fix: Previously, the Delete function in the github.com/buger/jsonparser component did not validate offsets when processing malformed JSON input. A remote attacker could provide crafted JSON data that caused a runtime panic, resulting in a denial-of-service condition. With this update, the Delete function validates offsets before processing. The function handles malformed JSON input as expected. For more information, see https://access.redhat.com/security/cve/cve-2026-32285.
* path-to-regexp component fix: Previously, the path-to-regexp component did not limit the complexity of generated regular expressions. A remote attacker could provide input containing multiple sequential optional groups, causing exponential growth in the generated expression and excessive resource consumption. This resulted in a denial-of-service condition. With this update, the component limits regular expression complexity. Input patterns with sequential optional groups no longer cause excessive resource consumption. For more information, see https://access.redhat.com/security/cve/cve-2026-4926.
* Go net/url.Parse function fix: Previously, the Go net/url.Parse function did not properly validate the host component of URLs containing IP-literals. The function ignored invalid characters preceding IP-literals and accepted URLs that should have been rejected. With this update, the function validates the entire host component. URLs with invalid characters before IP-literals are rejected as malformed. For more information, see https://access.redhat.com/security/cve/cve-2026-25679.
* Go crypto/x509 module fix: Previously, the Go crypto/x509 module did not apply all email address constraints when validating certificates. If a certificate contained multiple email constraints with the same local portion but different domain portions, the module only enforced the last constraint and ignored the others. With this update, the module applies all email address constraints during certificate chain validation. Certificates are validated against every specified email constraint. For more information, see https://access.redhat.com/security/cve/cve-2026-27137.
Known issues:
* Gateway fails to forward OTLP HTTP traffic when receiver TLS is enabled. When Tempo Monolithic is configured with `multitenancy.enabled: true` and `ingestion.otlp.http.tls.enabled: true`, the gateway forwards OTLP HTTP traffic to the Tempo receiver using plain HTTP instead of HTTPS. As a consequence, the connection fails with a `connection reset by peer` error because the receiver expects TLS connections. OTLP gRPC ingestion through the gateway is not affected. Jira issue: https://issues.redhat.com/browse/TRACING-5973.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Threats
Impact
Moderate
A flaw was found in the `github.com/antchfx/xpath` component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the `logicalQuery.Select` function, leading to 100% CPU utilization and a Denial of Service (DoS) condition for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Threats
Impact
Important
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
References
92 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements and bug fixes.\n\n\nBreaking changes:\n\n* None.\n\n\nDeprecations:\n\n* None.\n\n\nTechnology Preview features:\n\n* None.\n\n\nEnhancements:\n\n* None.\n\n\nBug fixes:\n\n* gRPC-Go authorization bypass vulnerability fix: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 :path pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed :path that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the :path pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.\n\n* XPath component fix: Previously, the github.com/antchfx/xpath component did not properly handle certain Boolean XPath expressions. A remote attacker could submit a crafted expression that caused an infinite loop, resulting in 100% CPU utilization and a denial-of-service condition. With this update, the XPath component correctly processes Boolean expressions that evaluate to true. The system no longer enters an infinite loop when handling these expressions. For more information, see https://access.redhat.com/security/cve/cve-2026-4645.\n\n* Go JOSE denial-of-service vulnerability fix: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial-of-service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.\n\n* Lodash _.template function fix: Previously, the lodash _.template function validated the variable option but did not validate options.imports key names. Both options passed values to the same code execution path. An attacker with the ability to control options.imports key names or pollute Object.prototype could exploit this gap to execute arbitrary code. With this update, lodash validates options.imports key names by using the same rules applied to the variable option. The _.template function rejects invalid key names and prevents code injection through this path. For more information, see https://access.redhat.com/security/cve/cve-2026-4800.\n\n* Go crypto/x509 and crypto/tls packages fix: Previously, the Go standard library crypto/x509 and crypto/tls packages did not limit the number of intermediate certificates processed during certificate chain building. An attacker could provide an excessive number of intermediate certificates, causing the system to perform an uncontrolled amount of work and resulting in a denial-of-service condition. With this update, the packages limit the number of intermediate certificates accepted during certificate chain validation. The system rejects certificate chains that exceed this limit. For more information, see https://access.redhat.com/security/cve/cve-2026-32280.\n\n* Go Root.Chmod function fix: Previously, the Root.Chmod function in the Go standard library internal/syscall/unix package had a race condition between checking and modifying a target file. An attacker could replace the target with a symbolic link after the check but before the operation completed, causing the permission change to apply to the linked file instead. This allowed an attacker to bypass directory restrictions and change permissions on unintended files. With this update, the Root.Chmod function prevents this race condition. The function no longer follows symbolic links that replace the target during execution. For more information, see https://access.redhat.com/security/cve/cve-2026-32282.\n\n* Go crypto/x509 package fix: Previously, the Go crypto/x509 package applied excluded DNS constraints to wildcard Subject Alternative Names (SANs) in a case-sensitive manner. An attacker could bypass certificate validation by using a different case in the wildcard SAN than the excluded DNS constraint specified. This allowed the system to accept a malicious certificate that should have been rejected. With this update, the package applies DNS constraints case-insensitively when validating wildcard SANs. Certificate chain verification correctly rejects certificates that match excluded DNS constraints regardless of case. For more information, see https://access.redhat.com/security/cve/cve-2026-33810.\n\n* Go crypto/tls component fix: Previously, the Go crypto/tls component did not re-validate certificates against updated certificate authority (CA) settings during TLS session resumption. If CA settings changed between the initial handshake and a resumed session, the component used the original CA settings. An attacker could exploit this to bypass certificate validation and establish a connection that should have been rejected. With this update, the component validates certificates against the current CA settings during session resumption. Resumed sessions that no longer meet CA requirements are rejected. For more information, see https://access.redhat.com/security/cve/cve-2025-68121.\n\n* jsonparser Delete function fix: Previously, the Delete function in the github.com/buger/jsonparser component did not validate offsets when processing malformed JSON input. A remote attacker could provide crafted JSON data that caused a runtime panic, resulting in a denial-of-service condition. With this update, the Delete function validates offsets before processing. The function handles malformed JSON input as expected. For more information, see https://access.redhat.com/security/cve/cve-2026-32285.\n\n* path-to-regexp component fix: Previously, the path-to-regexp component did not limit the complexity of generated regular expressions. A remote attacker could provide input containing multiple sequential optional groups, causing exponential growth in the generated expression and excessive resource consumption. This resulted in a denial-of-service condition. With this update, the component limits regular expression complexity. Input patterns with sequential optional groups no longer cause excessive resource consumption. For more information, see https://access.redhat.com/security/cve/cve-2026-4926.\n\n* Go net/url.Parse function fix: Previously, the Go net/url.Parse function did not properly validate the host component of URLs containing IP-literals. The function ignored invalid characters preceding IP-literals and accepted URLs that should have been rejected. With this update, the function validates the entire host component. URLs with invalid characters before IP-literals are rejected as malformed. For more information, see https://access.redhat.com/security/cve/cve-2026-25679.\n\n* Go crypto/x509 module fix: Previously, the Go crypto/x509 module did not apply all email address constraints when validating certificates. If a certificate contained multiple email constraints with the same local portion but different domain portions, the module only enforced the last constraint and ignored the others. With this update, the module applies all email address constraints during certificate chain validation. Certificates are validated against every specified email constraint. For more information, see https://access.redhat.com/security/cve/cve-2026-27137.\n\n\nKnown issues:\n\n* Gateway fails to forward OTLP HTTP traffic when receiver TLS is enabled. When Tempo Monolithic is configured with `multitenancy.enabled: true` and `ingestion.otlp.http.tls.enabled: true`, the gateway forwards OTLP HTTP traffic to the Tempo receiver using plain HTTP instead of HTTPS. As a consequence, the connection fails with a `connection reset by peer` error because the receiver expects TLS connections. OTLP gRPC ingestion through the gateway is not affected. Jira issue: https://issues.redhat.com/browse/TRACING-5973.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9385",
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32285",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4645",
"url": "https://access.redhat.com/security/cve/CVE-2026-4645"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9385.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release",
"tracking": {
"current_release_date": "2026-07-24T20:17:54+00:00",
"generator": {
"date": "2026-07-24T20:17:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:9385",
"initial_release_date": "2026-04-21T15:08:38+00:00",
"revision_history": [
{
"date": "2026-04-21T15:08:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T20:17:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.9.1",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-operator-bundle@sha256%3Ad180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776674955"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Aa5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3Ac939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Aa66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Ab68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Ac7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3Aee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.1",
"product_id": "Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-4645",
"discovery_date": "2026-03-23T06:02:52.120840+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `github.com/antchfx/xpath` component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the `logicalQuery.Select` function, leading to 100% CPU utilization and a Denial of Service (DoS) condition for the affected system.",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "A denial of service vulnerability was discovered in `github.com/antchfx/xpath`, with Important severity. Systems processing untrusted XPath expressions are vulnerable to an infinite loop, leading to 100% CPU utilization which would impact normal operations of the system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4645"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4645"
}
],
"release_date": "2026-03-17T20:58:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict the processing of untrusted or unvalidated XPath expressions by applications which utilize the `github.com/antchfx/xpath` component. Implement input validation and sanitization for all XPath expressions originating from external or untrusted sources. If possible, configure applications to only process XPath expressions from trusted sources or disable features that allow arbitrary XPath expression evaluation.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/antchfx/xpath: xpath: Denial of Service via crafted Boolean XPath expressions"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32285",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-26T20:01:54.925687+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "RHBZ#2451846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://github.com/buger/jsonparser/issues/275",
"url": "https://github.com/buger/jsonparser/issues/275"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4514",
"url": "https://github.com/golang/vulndb/issues/4514"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4514",
"url": "https://pkg.go.dev/vuln/GO-2026-4514"
}
],
"release_date": "2026-03-26T19:40:51.837000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:9742
Vulnerability from csaf_redhat - Published: 2026-04-22 14:56 - Updated: 2026-07-24 13:14Summary
Red Hat Security Advisory: Red Hat Developer Hub 1.8.6 release.
Severity
Critical
Notes
Topic: Red Hat Developer Hub 1.8.6 has been released.
Details: Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Python-Markdown. Parsing crafted markdown content containing malformed HTML-like sequences causes html.parser.HTMLParser to raise an unhandled AssertionError. This unhandled exception allows an attacker to cause an application crash and potentially disclose sensitive information via its stack trace.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici, a Node.js HTTP/1.1 client. A remote attacker could exploit this vulnerability by sending HTTP/1.1 requests that include duplicate Content-Length headers with different casing (e.g., "Content-Length" and "content-length"). This can lead to HTTP Request Smuggling, a technique where an attacker sends an ambiguous request that is interpreted differently by a proxy and a backend server. Successful exploitation could result in unauthorized access, cache poisoning, or credential hijacking. It may also cause a Denial of Service (DoS) if strict HTTP parsers reject the malformed requests.
7.3 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a "decompression bomb," during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici's ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client's Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially crafted input into API requests, which disrupts backend query processing. This results in the entire Backstage application crashing and restarting, leading to a platform-wide Denial of Service (DoS). As a result, legitimate users temporarily lose access to the platform.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Threats
Impact
Moderate
A flaw was found in Underscore.js, a JavaScript utility library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) attack by providing specially crafted recursive data structures. When these structures are processed by the _.flatten or _.isEqual functions, which lack a depth limit for recursion, a stack overflow occurs. This can make the application unavailable to legitimate users.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Threats
Impact
Moderate
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Backstage. The backstage/plugin-techdocs-node package uses an allowlist to filter dangerous MkDocs configuration keys during the documentation build process. A gap in this allowlist allows attackers to craft an mkdocs.yml file that causes arbitrary Python code execution.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in flatted, a JavaScript Object Notation (JSON) parser designed for handling circular data structures. A remote attacker can exploit this vulnerability by providing specially crafted JSON input. The parse() function in flatted fails to properly validate string values used as array index keys, allowing an attacker to manipulate internal JavaScript object prototypes. This prototype pollution can enable an attacker to execute arbitrary code or cause a denial of service, impacting the availability and integrity of affected systems.
9.8 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Threats
Impact
Critical
A flaw was found in the node-forge library, a JavaScript implementation of Transport Layer Security. This vulnerability, inherited from the bundled jsbn library, allows a remote attacker to cause a Denial of Service (DoS). When the BigInteger.modInverse() function is called with a zero value, it enters an infinite loop, causing the process to hang indefinitely and consume 100% of the CPU resources.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also called `node-forge`), a JavaScript library used for Transport Layer Security (TLS). The library's Ed25519 signature verification process does not correctly validate cryptographic signatures, allowing forged non-canonical signatures to be accepted. A remote attacker could exploit this signature malleability to bypass authentication and authorization logic. This vulnerability can also circumvent security checks in applications that rely on the uniqueness of cryptographic signatures for functions such as deduplication or preventing replay attacks.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also known as node-forge), a JavaScript implementation of Transport Layer Security (TLS). The `pki.verifyCertificateChain()` function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extensions to enable any leaf certificate to function as a Certificate Authority (CA) and sign other certificates. Consequently, node-forge could accept these unauthorized certificates as valid, potentially leading to spoofing or the issuance of illegitimate certificates.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in basic-ftp, an FTP client for Node.js. A remote attacker can exploit this vulnerability by injecting Carriage Return Line Feed (CRLF) sequences into file path parameters used by high-level APIs. This allows the attacker to split a single intended FTP command into multiple commands. Such command injection can lead to the execution of arbitrary commands, potentially compromising the integrity and availability of data or the system.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 | — |
Threats
Impact
Important
References
228 references
Acknowledgments
Thibault Guittet
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Developer Hub 1.8.6 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Developer Hub (RHDH) is Red Hat\u0027s enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9742",
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69534",
"url": "https://access.redhat.com/security/cve/CVE-2025-69534"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1525",
"url": "https://access.redhat.com/security/cve/CVE-2026-1525"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1526",
"url": "https://access.redhat.com/security/cve/CVE-2026-1526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1528",
"url": "https://access.redhat.com/security/cve/CVE-2026-1528"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-2229",
"url": "https://access.redhat.com/security/cve/CVE-2026-2229"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26996",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27601",
"url": "https://access.redhat.com/security/cve/CVE-2026-27601"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27904",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29186",
"url": "https://access.redhat.com/security/cve/CVE-2026-29186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-3118",
"url": "https://access.redhat.com/security/cve/CVE-2026-3118"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33036",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33228",
"url": "https://access.redhat.com/security/cve/CVE-2026-33228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33891",
"url": "https://access.redhat.com/security/cve/CVE-2026-33891"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33894",
"url": "https://access.redhat.com/security/cve/CVE-2026-33894"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33895",
"url": "https://access.redhat.com/security/cve/CVE-2026-33895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33896",
"url": "https://access.redhat.com/security/cve/CVE-2026-33896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39983",
"url": "https://access.redhat.com/security/cve/CVE-2026-39983"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh",
"url": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh"
},
{
"category": "external",
"summary": "https://developers.redhat.com/rhdh/overview",
"url": "https://developers.redhat.com/rhdh/overview"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_developer_hub",
"url": "https://docs.redhat.com/en/documentation/red_hat_developer_hub"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-2288",
"url": "https://issues.redhat.com/browse/RHDHBUGS-2288"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-2947",
"url": "https://issues.redhat.com/browse/RHDHBUGS-2947"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-2972",
"url": "https://issues.redhat.com/browse/RHDHBUGS-2972"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12327",
"url": "https://issues.redhat.com/browse/RHIDP-12327"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12388",
"url": "https://issues.redhat.com/browse/RHIDP-12388"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12419",
"url": "https://issues.redhat.com/browse/RHIDP-12419"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12511",
"url": "https://issues.redhat.com/browse/RHIDP-12511"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12568",
"url": "https://issues.redhat.com/browse/RHIDP-12568"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12647",
"url": "https://issues.redhat.com/browse/RHIDP-12647"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12650",
"url": "https://issues.redhat.com/browse/RHIDP-12650"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12655",
"url": "https://issues.redhat.com/browse/RHIDP-12655"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12666",
"url": "https://issues.redhat.com/browse/RHIDP-12666"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12686",
"url": "https://issues.redhat.com/browse/RHIDP-12686"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12784",
"url": "https://issues.redhat.com/browse/RHIDP-12784"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12880",
"url": "https://issues.redhat.com/browse/RHIDP-12880"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12887",
"url": "https://issues.redhat.com/browse/RHIDP-12887"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12921",
"url": "https://issues.redhat.com/browse/RHIDP-12921"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12930",
"url": "https://issues.redhat.com/browse/RHIDP-12930"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-12996",
"url": "https://issues.redhat.com/browse/RHIDP-12996"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13105",
"url": "https://issues.redhat.com/browse/RHIDP-13105"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13107",
"url": "https://issues.redhat.com/browse/RHIDP-13107"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13130",
"url": "https://issues.redhat.com/browse/RHIDP-13130"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13180",
"url": "https://issues.redhat.com/browse/RHIDP-13180"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13182",
"url": "https://issues.redhat.com/browse/RHIDP-13182"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13185",
"url": "https://issues.redhat.com/browse/RHIDP-13185"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9742.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Developer Hub 1.8.6 release.",
"tracking": {
"current_release_date": "2026-07-24T13:14:54+00:00",
"generator": {
"date": "2026-07-24T13:14:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:9742",
"initial_release_date": "2026-04-22T14:56:38+00:00",
"revision_history": [
{
"date": "2026-04-22T14:56:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T13:14:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Developer Hub 1.8",
"product": {
"name": "Red Hat Developer Hub 1.8",
"product_id": "Red Hat Developer Hub 1.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhdh:1.8::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Developer Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-hub-rhel9@sha256%3Abb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9?arch=amd64\u0026repository_url=registry.redhat.io/rhdh\u0026tag=1776784286"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-rhel9-operator@sha256%3Af09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c?arch=amd64\u0026repository_url=registry.redhat.io/rhdh\u0026tag=1776783947"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-operator-bundle@sha256%3Ab40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331?arch=amd64\u0026repository_url=registry.redhat.io/rhdh\u0026tag=1776787729"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64 as a component of Red Hat Developer Hub 1.8",
"product_id": "Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64 as a component of Red Hat Developer Hub 1.8",
"product_id": "Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64 as a component of Red Hat Developer Hub 1.8",
"product_id": "Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2025-69534",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-03-05T16:01:10.432461+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2444839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python-Markdown. Parsing crafted markdown content containing malformed HTML-like sequences causes html.parser.HTMLParser to raise an unhandled AssertionError. This unhandled exception allows an attacker to cause an application crash and potentially disclose sensitive information via its stack trace.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-markdown: denial of service via malformed HTML-like sequences",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to supply a specially crafted payload to be processed by an application using Python-Markdown. Additionally, the security impact of this vulnerability is limited to an information disclosure via the unhandled exception stack trace and a denial of service. There is no memory corruption or arbitrary command execution. Due to these reasons, this issue has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69534"
},
{
"category": "external",
"summary": "RHBZ#2444839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69534",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69534"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69534",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69534"
},
{
"category": "external",
"summary": "https://github.com/Python-Markdown/markdown",
"url": "https://github.com/Python-Markdown/markdown"
},
{
"category": "external",
"summary": "https://github.com/Python-Markdown/markdown/actions/runs/15736122892",
"url": "https://github.com/Python-Markdown/markdown/actions/runs/15736122892"
},
{
"category": "external",
"summary": "https://github.com/Python-Markdown/markdown/issues/1534",
"url": "https://github.com/Python-Markdown/markdown/issues/1534"
}
],
"release_date": "2026-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, wrap your markdown parsing function in a try/except block. This catches the unhandled exception, preventing both the application crash and the stack trace leak.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-markdown: denial of service via malformed HTML-like sequences"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-1525",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-03-12T21:01:33.639277+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447144"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici, a Node.js HTTP/1.1 client. A remote attacker could exploit this vulnerability by sending HTTP/1.1 requests that include duplicate Content-Length headers with different casing (e.g., \"Content-Length\" and \"content-length\"). This can lead to HTTP Request Smuggling, a technique where an attacker sends an ambiguous request that is interpreted differently by a proxy and a backend server. Successful exploitation could result in unauthorized access, cache poisoning, or credential hijacking. It may also cause a Denial of Service (DoS) if strict HTTP parsers reject the malformed requests.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact. A flaw in the undici Node.js HTTP/1.1 client allows for HTTP Request Smuggling or Denial of Service. This can occur in Red Hat products that use undici and process HTTP requests where user-controlled header names are not case-normalized, or headers are passed as flat arrays.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1525"
},
{
"category": "external",
"summary": "RHBZ#2447144",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447144"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1525"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1525",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1525"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/444.html",
"url": "https://cwe.mitre.org/data/definitions/444.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-2mjp-6q6p-2qxm"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3556037",
"url": "https://hackerone.com/reports/3556037"
},
{
"category": "external",
"summary": "https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6",
"url": "https://www.rfc-editor.org/rfc/rfc9110.html#section-8.6"
}
],
"release_date": "2026-03-12T19:56:55.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers"
},
{
"cve": "CVE-2026-1526",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T21:01:25.538271+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447142"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a \"decompression bomb,\" during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1526"
},
{
"category": "external",
"summary": "RHBZ#2447142",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447142"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1526"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc7692",
"url": "https://datatracker.ietf.org/doc/html/rfc7692"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3481206",
"url": "https://hackerone.com/reports/3481206"
}
],
"release_date": "2026-03-12T20:08:05.950000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression"
},
{
"cve": "CVE-2026-1528",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-12T21:01:36.954017+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447145"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici\u0027s ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via crafted WebSocket frame with large length",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1528"
},
{
"category": "external",
"summary": "RHBZ#2447145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1528"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1528",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1528"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3537648",
"url": "https://hackerone.com/reports/3537648"
}
],
"release_date": "2026-03-12T20:21:57.775000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service via crafted WebSocket frame with large length"
},
{
"cve": "CVE-2026-2229",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-12T21:01:29.187989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447143"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client\u0027s Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-2229"
},
{
"category": "external",
"summary": "RHBZ#2447143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447143"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-2229",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2229"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2229",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2229"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc7692",
"url": "https://datatracker.ietf.org/doc/html/rfc7692"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3487486",
"url": "https://hackerone.com/reports/3487486"
},
{
"category": "external",
"summary": "https://nodejs.org/api/zlib.html#class-zlibinflateraw",
"url": "https://nodejs.org/api/zlib.html#class-zlibinflateraw"
}
],
"release_date": "2026-03-12T20:27:05.600000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter"
},
{
"acknowledgments": [
{
"names": [
"Thibault Guittet"
]
}
],
"cve": "CVE-2026-3118",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-02-24T12:08:42.955000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442273"
}
],
"notes": [
{
"category": "description",
"text": "A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially crafted input into API requests, which disrupts backend query processing. This results in the entire Backstage application crashing and restarting, leading to a platform-wide Denial of Service (DoS). As a result, legitimate users temporarily lose access to the platform.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rhdh: GraphQL Injection Leading to Platform-Wide Denial of Service (DoS) in RH Developer Hub Orchestrator Plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This MODERATE impact vulnerability in the Orchestrator Plugin of Red Hat Developer Hub (Backstage) allows an authenticated attacker to cause a platform-wide Denial of Service. By injecting specially crafted input into GraphQL API requests, an attacker can disrupt backend query processing, leading to the application crashing and restarting. This issue temporarily prevents legitimate users from accessing the platform.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3118"
},
{
"category": "external",
"summary": "RHBZ#2442273",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442273"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3118"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3118",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3118"
}
],
"release_date": "2026-02-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Red Hat Developer Hub instance to trusted users and networks only. This limits the exposure of the vulnerable Orchestrator Plugin to unauthorized access.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rhdh: GraphQL Injection Leading to Platform-Wide Denial of Service (DoS) in RH Developer Hub Orchestrator Plugin"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-26996",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-20T04:01:11.896063+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441268"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "RHBZ#2441268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
"url": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"
}
],
"release_date": "2026-02-20T03:05:21.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
},
{
"cve": "CVE-2026-27601",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-03-03T23:01:58.011378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2444247"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Underscore.js, a JavaScript utility library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) attack by providing specially crafted recursive data structures. When these structures are processed by the _.flatten or _.isEqual functions, which lack a depth limit for recursion, a stack overflow occurs. This can make the application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Underscore.js: Underscore.js: Denial of Service via recursive data structures in flatten and isEqual functions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27601"
},
{
"category": "external",
"summary": "RHBZ#2444247",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444247"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27601"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27601",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27601"
},
{
"category": "external",
"summary": "https://github.com/jashkenas/underscore/commit/411e222eb0ca5d570cc4f6315c02c05b830ed2b4",
"url": "https://github.com/jashkenas/underscore/commit/411e222eb0ca5d570cc4f6315c02c05b830ed2b4"
},
{
"category": "external",
"summary": "https://github.com/jashkenas/underscore/commit/a6e23ae9647461ec33ad9f92a2ecfc220eea0a84",
"url": "https://github.com/jashkenas/underscore/commit/a6e23ae9647461ec33ad9f92a2ecfc220eea0a84"
},
{
"category": "external",
"summary": "https://github.com/jashkenas/underscore/security/advisories/GHSA-qpx9-hpmf-5gmw",
"url": "https://github.com/jashkenas/underscore/security/advisories/GHSA-qpx9-hpmf-5gmw"
}
],
"release_date": "2026-03-03T22:38:38.955000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications utilizing Underscore.js should ensure that any processing of untrusted, recursively structured data with `_.flatten` or `_.isEqual` explicitly enforces a finite depth limit. Review application code to identify and modify calls to these functions, adding appropriate depth parameters to prevent stack overflow conditions. Additionally, input validation should be implemented to sanitize untrusted data before it is processed by Underscore.js functions.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Underscore.js: Underscore.js: Denial of Service via recursive data structures in flatten and isEqual functions"
},
{
"cve": "CVE-2026-27904",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-26T02:01:23.004531+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442922"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "RHBZ#2442922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"
}
],
"release_date": "2026-02-26T01:07:42.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-29186",
"cwe": {
"id": "CWE-791",
"name": "Incomplete Filtering of Special Elements"
},
"discovery_date": "2026-03-07T16:01:40.949207+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Backstage. The backstage/plugin-techdocs-node package uses an allowlist to filter dangerous MkDocs configuration keys during the documentation build process. A gap in this allowlist allows attackers to craft an mkdocs.yml file that causes arbitrary Python code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "backstage/plugin-techdocs-node: TechDocs Mkdocs configuration key enables arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs commit access to a repository that Backstage is configured to track and build in order to introduce a malicious mkdocs.yml file into the TechDocs build pipeline. Additionally, an attacker can execute arbitrary Python code but the payload is confined by the permissions granted to the TechDocs build process which is typically a restricted service account, limiting the impact of this vulnerability. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29186"
},
{
"category": "external",
"summary": "RHBZ#2445480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29186"
},
{
"category": "external",
"summary": "https://github.com/backstage/backstage/security/advisories/GHSA-928r-fm4v-mvrw",
"url": "https://github.com/backstage/backstage/security/advisories/GHSA-928r-fm4v-mvrw"
}
],
"release_date": "2026-03-07T15:03:51.422000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "To mitigate this issue, enable docker isolation by updating the Backstage configuration to use \u0027runIn: docker\u0027 instead of \u0027runIn: local\u0027, confining the arbitrary Python code execution to a containerized environment. Additionally, limit commit access to repositories tracked by Backstage to trusted contributors only, and enforce mandatory pull request (PR) reviews for any modifications made to the mkdocs.yml file.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "backstage/plugin-techdocs-node: TechDocs Mkdocs configuration key enables arbitrary code execution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-33036",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-20T06:02:18.306021+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "RHBZ#2449458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33036"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r"
}
],
"release_date": "2026-03-20T05:17:03.290000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass"
},
{
"cve": "CVE-2026-33228",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-21T00:01:43.424803+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449872"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in flatted, a JavaScript Object Notation (JSON) parser designed for handling circular data structures. A remote attacker can exploit this vulnerability by providing specially crafted JSON input. The parse() function in flatted fails to properly validate string values used as array index keys, allowing an attacker to manipulate internal JavaScript object prototypes. This prototype pollution can enable an attacker to execute arbitrary code or cause a denial of service, impacting the availability and integrity of affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Critical vulnerability was discovered in \u0027flatted\u0027, a JavaScript JSON parser. It could enable a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service. Exploitation involves prototype pollution by providing a specially crafted JSON input. Red Hat products that process un-trusted JSON data and utilize the \u0027flatted\u0027 library are at risk if they do not properly sanitize input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33228"
},
{
"category": "external",
"summary": "RHBZ#2449872",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449872"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33228",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33228"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802",
"url": "https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/releases/tag/v3.4.2",
"url": "https://github.com/WebReflection/flatted/releases/tag/v3.4.2"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-rf6f-7fwh-wjgh",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-rf6f-7fwh-wjgh"
}
],
"release_date": "2026-03-20T23:06:48.485000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON."
},
{
"cve": "CVE-2026-33891",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-03-27T21:01:34.410210+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452450"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-forge library, a JavaScript implementation of Transport Layer Security. This vulnerability, inherited from the bundled jsbn library, allows a remote attacker to cause a Denial of Service (DoS). When the BigInteger.modInverse() function is called with a zero value, it enters an infinite loop, causing the process to hang indefinitely and consume 100% of the CPU resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33891"
},
{
"category": "external",
"summary": "RHBZ#2452450",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452450"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33891"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33891",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33891"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/9bb8d67b99d17e4ebb5fd7596cd699e11f25d023",
"url": "https://github.com/digitalbazaar/forge/commit/9bb8d67b99d17e4ebb5fd7596cd699e11f25d023"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5m6q-g25r-mvwx",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5m6q-g25r-mvwx"
}
],
"release_date": "2026-03-27T20:43:37.725000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()"
},
{
"cve": "CVE-2026-33894",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-27T21:02:52.462999+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452464"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33894"
},
{
"category": "external",
"summary": "RHBZ#2452464",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452464"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33894",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33894"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33894",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33894"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc2313#section-8",
"url": "https://datatracker.ietf.org/doc/html/rfc2313#section-8"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp"
},
{
"category": "external",
"summary": "https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE",
"url": "https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE"
},
{
"category": "external",
"summary": "https://www.rfc-editor.org/rfc/rfc8017.html",
"url": "https://www.rfc-editor.org/rfc/rfc8017.html"
}
],
"release_date": "2026-03-27T20:45:49.583000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification"
},
{
"cve": "CVE-2026-33895",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-27T21:02:18.484291+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452457"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also called `node-forge`), a JavaScript library used for Transport Layer Security (TLS). The library\u0027s Ed25519 signature verification process does not correctly validate cryptographic signatures, allowing forged non-canonical signatures to be accepted. A remote attacker could exploit this signature malleability to bypass authentication and authorization logic. This vulnerability can also circumvent security checks in applications that rely on the uniqueness of cryptographic signatures for functions such as deduplication or preventing replay attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33895"
},
{
"category": "external",
"summary": "RHBZ#2452457",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452457"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33895"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc8032#section-8.4",
"url": "https://datatracker.ietf.org/doc/html/rfc8032#section-8.4"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/bdecf11571c9f1a487cc0fe72fe78ff6dfa96b85",
"url": "https://github.com/digitalbazaar/forge/commit/bdecf11571c9f1a487cc0fe72fe78ff6dfa96b85"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-q67f-28xg-22rw",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-q67f-28xg-22rw"
}
],
"release_date": "2026-03-27T20:47:54.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures"
},
{
"cve": "CVE-2026-33896",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-27T21:02:22.762233+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also known as node-forge), a JavaScript implementation of Transport Layer Security (TLS). The `pki.verifyCertificateChain()` function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extensions to enable any leaf certificate to function as a Certificate Authority (CA) and sign other certificates. Consequently, node-forge could accept these unauthorized certificates as valid, potentially leading to spoofing or the issuance of illegitimate certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33896"
},
{
"category": "external",
"summary": "RHBZ#2452458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33896"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90",
"url": "https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25"
}
],
"release_date": "2026-03-27T20:50:03.418000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance"
},
{
"cve": "CVE-2026-39983",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-04-09T18:02:16.209487+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456971"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in basic-ftp, an FTP client for Node.js. A remote attacker can exploit this vulnerability by injecting Carriage Return Line Feed (CRLF) sequences into file path parameters used by high-level APIs. This allows the attacker to split a single intended FTP command into multiple commands. Such command injection can lead to the execution of arbitrary commands, potentially compromising the integrity and availability of data or the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "basic-ftp: basic-ftp: Command injection via CRLF sequences in file path parameters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39983"
},
{
"category": "external",
"summary": "RHBZ#2456971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39983"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39983",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39983"
},
{
"category": "external",
"summary": "https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b",
"url": "https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b"
},
{
"category": "external",
"summary": "https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1",
"url": "https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1"
},
{
"category": "external",
"summary": "https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q",
"url": "https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q"
}
],
"release_date": "2026-04-09T17:05:46.228000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "basic-ftp: basic-ftp: Command injection via CRLF sequences in file path parameters"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-22T14:56:38+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:b40f228ed49b81e675763d0bb1e38e7a45c45eef8003237abfbddbfb952bb331_amd64",
"Red Hat Developer Hub 1.8:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:f09d63af77eec6b131067a08b1bd3a8c7673f9e68325bfde1ae081f85d73598c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
rlsa-2026:19167
Vulnerability from osv_rocky
Published
2026-05-28 15:43
Modified
2026-06-11 12:06
Summary
Important: pcs security update
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
- lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Severity
8.1 (High)
Credits
Rocky Enterprise Software Foundation
Red Hat
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"package": {
"ecosystem": "Rocky Linux:9",
"name": "pcs",
"purl": "pkg:rpm/rocky-linux/pcs?distro=rocky-linux-9\u0026epoch=0"
},
"ranges": [
{
"database_specific": {
"yum_repository": "ResilientStorage"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.11.11-2.el9_8.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [
{
"name": "Rocky Enterprise Software Foundation"
},
{
"name": "Red Hat"
}
],
"details": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "RLSA-2026:19167",
"modified": "2026-06-11T12:06:22.780257Z",
"published": "2026-05-28T15:43:22.126112Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.rockylinux.org/RLSA-2026:19167"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
}
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Important: pcs security update",
"upstream": [
"CVE-2026-4800"
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…